[tls] Support TLS version 1.1

Advertise support for TLS version 1.1, and be prepared to downgrade to
TLS version 1.0.  Tested against Apache with mod_gnutls, using the
GnuTLSPriorities directive to force specific protocol versions.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2012-03-03 14:11:46 +00:00
parent d620606d3e
commit d9ce3bfe4c
2 changed files with 30 additions and 16 deletions

View File

@@ -138,6 +138,8 @@ struct tls_session {
/** Ciphertext stream */
struct interface cipherstream;
/** Protocol version */
uint16_t version;
/** Current TX cipher specification */
struct tls_cipherspec tx_cipherspec;
/** Next TX cipher specification */