support tls v1.3 with OpenSSL 1.1.1
Summary:
When upgrading to OpenSSL 1.1.1 mozilla_intermediate explicitely disables
TLSv1.3, which is a regression from OpenSSL 1.1.0
Use mozilla_intermediate_v5, which does keep TLS v1.3 enabled with OpenSSL
1.1.1
credits to mingtaoy for tracing where tls1.3 was being disabled
@@ -57,7 +57,7 @@ impl SslConfig {
/// Creates a acceptor builder with Ssl security configs pre set.
fn inner_tls_acceptor_builder(self) -> Result<SslAcceptorBuilder> {
- let mut acceptor = SslAcceptor::mozilla_intermediate(SslMethod::tls())?;
+ let mut acceptor = SslAcceptor::mozilla_intermediate_v5(SslMethod::tls())?;
let pkcs12 =
build_identity(self.cert, self.private_key).context("failed to build pkcs12")?;
