ssl_server2 and ssl_client2 adapted to support maximum protocol version
diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index 72372ac..9802c56 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -391,6 +391,20 @@
goto usage;
}
+ if( opt.force_ciphersuite[0] > 0 )
+ {
+ const ssl_ciphersuite_t *ciphersuite_info;
+ ciphersuite_info = ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
+
+ if( ciphersuite_info->min_minor_ver > opt.max_version ||
+ ciphersuite_info->max_minor_ver < opt.min_version )
+ {
+ printf("forced ciphersuite not allowed with this protocol version\n");
+ ret = 2;
+ goto usage;
+ }
+ }
+
#if defined(POLARSSL_KEY_EXCHANGE_PSK_ENABLED)
/*
* Unhexify the pre-shared key if any is given