From d9ce3bfe4c574934234a07cab1b7c6af917645c5 Mon Sep 17 00:00:00 2001 From: Michael Brown Date: Sat, 3 Mar 2012 14:11:46 +0000 Subject: [tls] Support TLS version 1.1 Advertise support for TLS version 1.1, and be prepared to downgrade to TLS version 1.0. Tested against Apache with mod_gnutls, using the GnuTLSPriorities directive to force specific protocol versions. Signed-off-by: Michael Brown --- src/include/ipxe/tls.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/include/ipxe/tls.h') diff --git a/src/include/ipxe/tls.h b/src/include/ipxe/tls.h index 94cd322c8..c14e92106 100644 --- a/src/include/ipxe/tls.h +++ b/src/include/ipxe/tls.h @@ -138,6 +138,8 @@ struct tls_session { /** Ciphertext stream */ struct interface cipherstream; + /** Protocol version */ + uint16_t version; /** Current TX cipher specification */ struct tls_cipherspec tx_cipherspec; /** Next TX cipher specification */ -- cgit v1.2.3-55-g7522