nss: set default max-tls to 1.3/1.2

Fixes #3261
curl · Nov 13, 2018 · 0c44809 · 0c44809
1 parent 2f5f31b
commit 0c44809
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/lib/vtls/nss.c b/lib/vtls/nss.c
@@ -1792,7 +1792,11 @@ static CURLcode nss_setup_connect(struct connectdata *conn, int sockindex)
 
   SSLVersionRange sslver = {
     SSL_LIBRARY_VERSION_TLS_1_0,  /* min */
-    SSL_LIBRARY_VERSION_TLS_1_0   /* max */
+#ifdef SSL_LIBRARY_VERSION_TLS_1_3
+    SSL_LIBRARY_VERSION_TLS_1_3   /* max */
+#else
+    SSL_LIBRARY_VERSION_TLS_1_2
+#endif
   };
 
   BACKEND->data = data;