How to disable TLS1.3 in openSSl 1.1.1

Question

I have updated my openssl from 1.1.0 to 1.1.1 recently. Openssl 1.1.1 version supports TLS1.3 feature.

But i want to use TLS 1.2 only for my application with curl 7.58 in Ubuntu 18.04. So while using openssl 1.1.1 how to disable default TLS 1.3 and how to enable TLS 1.2 ?

Can i set any flags while building openssl 1.1.1 to disable TLS 1.3 or can i get any package from ubuntu to disable TLS 1.3

Answer 1

对于 curl，如果您的 Ubuntu 支持，您可以使用--tls-max 1.2 。