openssl_server example: Roll back to TLS_server_method() for compatibility

Add a comment recommending TLS v1.2.
pull/157/merge
Angus Gratton 2017-02-15 17:18:01 +11:00
rodzic dcd5c5bb73
commit 39c546d63f
1 zmienionych plików z 5 dodań i 1 usunięć

Wyświetl plik

@ -71,7 +71,11 @@ static void openssl_demo_thread(void *p)
const unsigned int prvtkey_pem_bytes = prvtkey_pem_end - prvtkey_pem_start;
ESP_LOGI(TAG, "SSL server context create ......");
ctx = SSL_CTX_new(TLSv1_2_server_method());
/* For security reasons, it is best if you can use
TLSv1_2_server_method() here instead of TLS_server_method().
However some old browsers may not support TLS v1.2.
*/
ctx = SSL_CTX_new(TLS_server_method());
if (!ctx) {
ESP_LOGI(TAG, "failed");
goto failed1;