From 408ba6f7b8cdd8180972e2ed2af8fad234a36416 Mon Sep 17 00:00:00 2001 From: Yanray Wang Date: Fri, 8 Dec 2023 10:18:03 +0800 Subject: [PATCH] tls13: srv: replace with internal API to check is_tls12_enabled Signed-off-by: Yanray Wang --- library/ssl_tls13_server.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c index b3f25b5e87..eb0b5281af 100644 --- a/library/ssl_tls13_server.c +++ b/library/ssl_tls13_server.c @@ -1921,7 +1921,7 @@ static int ssl_tls13_process_client_hello(mbedtls_ssl_context *ssl) */ if (SSL_CLIENT_HELLO_TLS1_2 == parse_client_hello_ret) { /* Check if server supports TLS 1.2 */ - if (ssl->conf->min_tls_version > MBEDTLS_SSL_VERSION_TLS1_2) { + if (!mbedtls_ssl_conf_is_tls12_enabled(ssl->conf)) { MBEDTLS_SSL_DEBUG_MSG( 1, ("Unsupported version of TLS 1.2 was received")); MBEDTLS_SSL_PEND_FATAL_ALERT(