Checking behavier using only TLS1_3_VERSION

diff --git a/Makefile b/Makefile
index f28a26d23d4f8a2f5b4b746739c2a6020a67c597..4efc07013a4099728f725b1cff1651626853a56b 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -148,7 +148,7 @@ tlsref:
                        -cert certs/localhost-cert.pem                  \
                        -key certs/localhost-key.pem                    \
                        -starttls smtp                                  \
-                       -connect tar1.osukiss.org:25
+                       -connect $(TESTSRV):$(TESTPORT) 
 
 #                      -connect mx2.free.fr:25
 #                      -connect mailprod1.safe.ca:587

diff --git a/lib/unitls.c b/lib/unitls.c
index f61ac64d6caa73dfd5d9ebc6d2e846e242dc71d0..3d4b46a2caab190a0143f8efcfda4ede84d5f3fc 100644 (file)
--- a/lib/unitls.c
+++ b/lib/unitls.c
@@ -295,6 +295,7 @@ while (proceed==true) {
       (void) SSL_CTX_set_purpose(tls->ctx,X509_PURPOSE_ANY);
       (void) SSL_CTX_set_verify_depth(tls->ctx,7);
       (void) SSL_CTX_set_options(tls->ctx,SSL_OP_ALL);
+      (void) SSL_CTX_set_min_proto_version(tls->ctx,TLS1_3_VERSION);
       (void) SSL_CTX_set_security_level(tls->ctx,seclevel);
       if (SSL_CTX_set_cipher_list(tls->ctx,cipher_list)==0) {
         (void) showtlserror(tls,0,"No cipher list");