Changes to version handling in support of DTLS work.

Add a few 'feature tests' to Protocol_Version which helps avoid some
explicit comparisons. Additionally, remove the relational comparisons,
except for operator> which is still used in a few locations.

TLS::Policy has changed and no longer has min_version. The new hook
that replaces it is acceptable_protocol_version, which should return
true if and only if we are willing to negotiate the version
returned. This leads to a somewhat cleaner result and additionally
allows one to do maybe interesting though mostly useless things like
allowing TLS 1.0 or 1.2 but not 1.1.

Fix the version sent in the (unused) DTLS hello verify message.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/tls/cert_ver.cpp b/src/tls/cert_ver.cpp
index ae00536df..870d70951 100644
--- a/src/tls/cert_ver.cpp
+++ b/src/tls/cert_ver.cpp
@@ -58,7 +58,7 @@ Certificate_Verify::Certificate_Verify(const std::vector<byte>& buf,
    {
    TLS_Data_Reader reader(buf);
 
-   if(version >= Protocol_Version::TLS_V12)
+   if(version.supports_negotiable_signature_algorithms())
       {
       hash_algo = Signature_Algorithms::hash_algo_name(reader.get_byte());
       sig_algo = Signature_Algorithms::sig_algo_name(reader.get_byte());