server: disable tls 1.0/1.1 by default for openssl

tsl0922 · Jul 4, 2022 · 8b6b71e · 8b6b71e
1 parent a41c05e
commit 8b6b71e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/server.c b/src/server.c
@@ -532,6 +532,9 @@ int main(int argc, char **argv) {
   if (ssl) {
     info.ssl_cert_filepath = cert_path;
     info.ssl_private_key_filepath = key_path;
+    #ifndef LWS_WITH_MBEDTLS
+    info.ssl_options_set = SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1;
+    #endif
     if (strlen(ca_path) > 0) {
       info.ssl_ca_filepath = ca_path;
       info.options |= LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT;