tls13: srv: replace with internal API to check is_tls12_enabled

Signed-off-by: Yanray Wang <yanray.wang@arm.com>
This commit is contained in:
Yanray Wang 2023-12-08 10:18:03 +08:00
parent 631e6bd221
commit 408ba6f7b8

View File

@ -1921,7 +1921,7 @@ static int ssl_tls13_process_client_hello(mbedtls_ssl_context *ssl)
*/
if (SSL_CLIENT_HELLO_TLS1_2 == parse_client_hello_ret) {
/* Check if server supports TLS 1.2 */
if (ssl->conf->min_tls_version > MBEDTLS_SSL_VERSION_TLS1_2) {
if (!mbedtls_ssl_conf_is_tls12_enabled(ssl->conf)) {
MBEDTLS_SSL_DEBUG_MSG(
1, ("Unsupported version of TLS 1.2 was received"));
MBEDTLS_SSL_PEND_FATAL_ALERT(