From 227c44e79f3a1e26fc819e3aa1dca9d830a6da33 Mon Sep 17 00:00:00 2001 From: Mingye Chen Date: Fri, 7 Feb 2025 15:20:18 -0700 Subject: [PATCH] fix: allow fallback to old tls version --- handshake_client.go | 6 +++--- u_handshake_client.go | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/handshake_client.go b/handshake_client.go index 91cf41b..5c7420a 100644 --- a/handshake_client.go +++ b/handshake_client.go @@ -214,9 +214,9 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli var ech *echClientContext if c.config.EncryptedClientHelloConfigList != nil { - if c.config.MinVersion != 0 && c.config.MinVersion < VersionTLS13 { - return nil, nil, nil, errors.New("tls: MinVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populated") - } + // if c.config.MinVersion != 0 && c.config.MinVersion < VersionTLS13 { + // return nil, nil, nil, errors.New("tls: MinVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populated") + // } if c.config.MaxVersion != 0 && c.config.MaxVersion <= VersionTLS12 { return nil, nil, nil, errors.New("tls: MaxVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populated") } diff --git a/u_handshake_client.go b/u_handshake_client.go index 8674caa..cc93aa7 100644 --- a/u_handshake_client.go +++ b/u_handshake_client.go @@ -353,9 +353,9 @@ func (c *Conn) makeClientHelloForApplyPreset() (*clientHelloMsg, *keySharePrivat var ech *echClientContext if c.config.EncryptedClientHelloConfigList != nil { - if c.config.MinVersion != 0 && c.config.MinVersion < VersionTLS13 { - return nil, nil, nil, errors.New("tls: MinVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populated") - } + // if c.config.MinVersion != 0 && c.config.MinVersion < VersionTLS13 { + // return nil, nil, nil, errors.New("tls: MinVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populated") + // } if c.config.MaxVersion != 0 && c.config.MaxVersion <= VersionTLS12 { return nil, nil, nil, errors.New("tls: MaxVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populated") }