From 854ea56eb2d45703f93979dce062c7f055d6b352 Mon Sep 17 00:00:00 2001
From: svanstone-resilient
 <62011179+svanstone-resilient@users.noreply.github.com>
Date: Mon, 28 Feb 2022 15:26:27 +0000
Subject: [PATCH] Fix for unsupported TLS versions

Before this change, sipp would negotiate TLS 1.3. This doesn't seem to work though as sipp doesn't support TLS 1.3.
Now sipp will never negotiate a TLS version it doesn't support.
---
 src/sslsocket.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/sslsocket.cpp b/src/sslsocket.cpp
index 172e99f4..f8a16d16 100644
--- a/src/sslsocket.cpp
+++ b/src/sslsocket.cpp
@@ -202,7 +202,7 @@ static SSL_CTX* instantiate_ssl_context(const char* context_name)
 #else
         min_tls_version = TLS1_1_VERSION;
 #endif
-        max_tls_version = TLS_MAX_VERSION;
+        max_tls_version = TLS1_2_VERSION;
     } else if (tls_version == 1.0) {
 #if !defined(USE_WOLFSSL) || defined(WOLFSSL_ALLOW_TLSV10)
         max_tls_version = min_tls_version = TLS1_VERSION;