explicitly require TLS 1.2 or 1.3

it's the default, but just in case (since gemini spec explicitly talks
about 1.3 as "default" and 1.2 for ease of implementation)

1 files changed, 4 insertions, 0 deletions

diff --git a/gmid.c b/gmid.c
index b7db8b9..394dd9a 100644
--- a/gmid.c
+++ b/gmid.c
@@ -391,6 +391,10 @@ main(int argc, char **argv)
 	if ((conf = tls_config_new()) == NULL)
 		err(1, "tls_config_new");
 
+	if (tls_config_set_protocols(conf,
+	    TLS_PROTOCOL_TLSv1_2 | TLS_PROTOCOL_TLSv1_3) == -1)
+		err(1, "tls_config_set_protocols");
+
 	if ((m = tls_load_file(cert, &mlen, NULL)) == NULL)
 		err(1, "tls_load_file: %s", cert);
 	if (tls_config_set_cert_mem(conf, m, mlen) == -1)