Error out when forcing an unsupported TLS version
authorBenjamin Kaduk <bkaduk@akamai.com>
Tue, 9 May 2017 23:39:50 +0000 (18:39 -0500)
committerBenjamin Kaduk <kaduk@mit.edu>
Fri, 15 Sep 2017 15:24:50 +0000 (10:24 -0500)
commita8b85c5ffee1f5adf7a27fcc5613b752b1a28b63
treedc33aad15e19fb53b5e0177744149bf7a4f5e7f1
parent583d8f6342f1a6e01e72cf55bffabf5b90797317
Error out when forcing an unsupported TLS version

If the result of a SSL_{CTX_,}set_{min,max}_proto_version() call
leaves the min and max version identical, and support for that version
is compiled out of the library, return an error.  Such an object has
no hope of successfully completing a handshake, and this error may
be easier to decipher than the resulting handshake failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit c8feba723a33e15201009d716d9ead02e653dfe6)

Updated the cherry-pick to not reference TLS1_3_VERSION, which does
not exist on this branch.

(Merged from https://github.com/openssl/openssl/pull/4376)
ssl/ssl_lib.c