Turn on TLSv1.3 downgrade protection by default

[openssl.git] / Configure

diff --git a/Configure b/Configure
index 059271275d74e85bdf4e12ff7aa4cda540e8a2bd..c9f6ea760b4ca6f23205e4c5f402fddfcc0e0f4e 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -405,7 +405,6 @@ my @disablables = (
     "tests",
     "threads",
     "tls",
     "tests",
     "threads",
     "tls",

-    "tls13downgrade",

     "ts",
     "ubsan",
     "ui-console",
     "ts",
     "ubsan",
     "ui-console",


@@ -449,7 +448,6 @@ our %disabled = ( # "what"         => "comment"
                  "ssl3"                => "default",
                  "ssl3-method"         => "default",
                   "ubsan"              => "default",
                  "ssl3"                => "default",
                  "ssl3-method"         => "default",
                   "ubsan"              => "default",

-                 "tls13downgrade"      => "default",

                  "unit-test"           => "default",
                  "weak-ssl-ciphers"    => "default",
                  "zlib"                => "default",
                  "unit-test"           => "default",
                  "weak-ssl-ciphers"    => "default",
                  "zlib"                => "default",