diff --git a/ChangeLog b/ChangeLog
index a51f56d..cbdfbef 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,7 @@
 10/17/2016 Oleg Moskalenko <mom040267@gmail.com>
 Version 4.5.0.6 'dan Eider':
 	- Typos in the text fixed.
+	- TLS1.2 support fixed.
 
 08/27/2016 Oleg Moskalenko <mom040267@gmail.com>
 Version 4.5.0.5 'dan Eider':
diff --git a/src/apps/relay/ns_ioalib_engine_impl.c b/src/apps/relay/ns_ioalib_engine_impl.c
index 80f1d13..6db5352 100644
--- a/src/apps/relay/ns_ioalib_engine_impl.c
+++ b/src/apps/relay/ns_ioalib_engine_impl.c
@@ -2179,7 +2179,7 @@ static TURN_TLS_TYPE check_tentative_tls(ioa_socket_raw fd)
 	if(len>0 && ((size_t)len == sizeof(s))) {
 		if((s[0]==22)&&(s[1]==3)&&(s[5]==1)&&(s[9]==3)) {
 			char max_supported = (char)(TURN_TLS_TOTAL-2);
-			if(s[10] >= max_supported)
+			if(s[10] > max_supported)
 				ret = TURN_TLS_SSL23; /* compatibility mode */
 			else
 				ret = (TURN_TLS_TYPE)(s[10]+1);