From 6021d8ec5affe07116cdae81fa3db81d67996aac Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Fri, 27 Apr 2018 12:09:08 +0100 Subject: Fix a bug in create_ssl_ctx_pair() The max protocol version was only being set on the server side. It should have been done on both the client and the server. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6113) --- test/ssltestlib.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'test/ssltestlib.c') diff --git a/test/ssltestlib.c b/test/ssltestlib.c index ebd87cc7f0..959e3296a8 100644 --- a/test/ssltestlib.c +++ b/test/ssltestlib.c @@ -531,10 +531,10 @@ int create_ssl_ctx_pair(const SSL_METHOD *sm, const SSL_METHOD *cm, goto err; if (clientctx != NULL && ((min_proto_version > 0 - && !TEST_true(SSL_CTX_set_min_proto_version(serverctx, + && !TEST_true(SSL_CTX_set_min_proto_version(clientctx, min_proto_version))) || (max_proto_version > 0 - && !TEST_true(SSL_CTX_set_max_proto_version(serverctx, + && !TEST_true(SSL_CTX_set_max_proto_version(clientctx, max_proto_version))))) goto err; -- cgit v1.2.3