Skip to content

Commit

Permalink
Adds the method setSSLVersions() also to WiFiClientSecure in order to…
Browse files Browse the repository at this point in the history
… use that new feature. (#7925)

Co-authored-by: Manuel Domínguez Dorado <[email protected]>
  • Loading branch information
manolodd and Manuel Domínguez Dorado authored Mar 15, 2021
1 parent 7475ba7 commit 2406fe8
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions libraries/ESP8266WiFi/src/WiFiClientSecureBearSSL.h
Original file line number Diff line number Diff line change
Expand Up @@ -304,6 +304,10 @@ class WiFiClientSecure : public WiFiClient {
bool setCiphers(const std::vector<uint16_t> list) { return _ctx->setCiphers(list); }
bool setCiphersLessSecure() { return _ctx->setCiphersLessSecure(); } // Only use the limited set of RSA ciphers without EC

// Limit the TLS versions BearSSL will connect with. Default is
// BR_TLS10...BR_TLS12. Allowed values are: BR_TLS10, BR_TLS11, BR_TLS12
bool setSSLVersion(uint32_t min = BR_TLS10, uint32_t max = BR_TLS12) { return _ctx->setSSLVersion(min, max); };

// Check for Maximum Fragment Length support for given len before connection (possibly insecure)
static bool probeMaxFragmentLength(IPAddress ip, uint16_t port, uint16_t len);
static bool probeMaxFragmentLength(const char *hostname, uint16_t port, uint16_t len);
Expand Down

0 comments on commit 2406fe8

Please sign in to comment.