openssl allows multiple TLS version support through a single SSL_CTX object. This PR replaces 4 per-version SSL_CTX objects with a single object (DTLS is not yet changed). SSL context initialization code for openssl with modern API (>=1.1.0) uses `TLS_server_method` and `SSL_CTX_set_min_proto_version` instead of enabling specific TLS version. Byproduct of this is TLSv1_3 support when used with openssl-1.1.1 and above TLS 1.2 and TLS 1.3 cannot be disabled (as before) Test plan: - run_tests.sh script now runs turnserver with SSL certificate (which enables TLS support) - run_tests.sh now has one more basic test that uses TLS protocol Co-authored-by: Pavel Punsky <pavel.punsky@epicgames.com> |
||
|---|---|---|
| .. | ||
| ca | ||
| etc | ||
| scripts | ||
| var/db | ||
| cpu-mem.sh | ||
| run_all_clients.sh | ||
| run_tests.sh | ||