fedserv/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tls: openssl backend offers TLS 1.3 via mozilla_intermediate_v5 (was capped at 1.2)

Browse source
This commit is contained in:
Jean Chevronnet 2026-08-24 20:38:58 +00:00
parent 51602737e2
commit 85eb8218f0
No known key found for this signature in database
GPG key ID: 439666D63A9477E4
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/tls.rs
View file

@ -115,7 +115,8 @@ fn configure(b: &mut SslAcceptorBuilder, cert: &str, key: &str) -> io::Result<()
/// A standalone configured context for one SNI hostname. /// A standalone configured context for one SNI hostname.
fn build_ctx(cert: &str, key: &str) -> io::Result<SslContext> { fn build_ctx(cert: &str, key: &str) -> io::Result<SslContext> {
let mut b = SslAcceptor::mozilla_intermediate(SslMethod::tls()).map_err(err)?; // _v5 = Mozilla intermediate v5 (TLS 1.2 + 1.3); the non-v5 profile caps at 1.2.
let mut b = SslAcceptor::mozilla_intermediate_v5(SslMethod::tls()).map_err(err)?;
configure(&mut b, cert, key)?; configure(&mut b, cert, key)?;
Ok(b.build().into_context()) Ok(b.build().into_context())
} }
@ -127,7 +128,7 @@ fn build_acceptor(primary: &CertPaths, sni: &[(String, CertPaths)]) -> io::Resul
for (host, cp) in sni { for (host, cp) in sni {
map.insert(host.to_ascii_lowercase(), build_ctx(&cp.cert, &cp.key)?); map.insert(host.to_ascii_lowercase(), build_ctx(&cp.cert, &cp.key)?);
} }
let mut b = SslAcceptor::mozilla_intermediate(SslMethod::tls()).map_err(err)?; let mut b = SslAcceptor::mozilla_intermediate_v5(SslMethod::tls()).map_err(err)?;
configure(&mut b, &primary.cert, &primary.key)?; configure(&mut b, &primary.cert, &primary.key)?;
if !map.is_empty() { if !map.is_empty() {
b.set_servername_callback(move |ssl, _alert| { b.set_servername_callback(move |ssl, _alert| {