Error out when forcing an unsupported TLS version
authorBenjamin Kaduk <bkaduk@akamai.com>
Tue, 9 May 2017 23:39:50 +0000 (18:39 -0500)
committerBenjamin Kaduk <kaduk@mit.edu>
Wed, 5 Jul 2017 17:58:34 +0000 (12:58 -0500)
commitc8feba723a33e15201009d716d9ead02e653dfe6
tree328dc8c533553494d28dc0425dd1d8895f9578b7
parent7b5b2c461475ad2c810fec093dd9c2927876ec25
Error out when forcing an unsupported TLS version

If the result of a SSL_{CTX_,}set_{min,max}_proto_version() call
leaves the min and max version identical, and support for that version
is compiled out of the library, return an error.  Such an object has
no hope of successfully completing a handshake, and this error may
be easier to decipher than the resulting handshake failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3422)
ssl/ssl_lib.c