diff --git a/common.go b/common.go index e7dd94b..53209a6 100644 --- a/common.go +++ b/common.go @@ -746,14 +746,11 @@ type Config struct { // MinVersion contains the minimum TLS version that is acceptable. // - // By default, TLS 1.2 is currently used as the minimum when acting as a - // client, and TLS 1.0 when acting as a server. TLS 1.0 is the minimum - // supported by this package, both as a client and as a server. + // By default, TLS 1.2 is currently used as the minimum. TLS 1.0 is the + // minimum supported by this package. // - // The client-side default can temporarily be reverted to TLS 1.0 by - // including the value "x509sha1=1" in the GODEBUG environment variable. - // Note that this option will be removed in Go 1.19 (but it will still be - // possible to set this field to VersionTLS10 explicitly). + // The server-side default can be reverted to TLS 1.0 by including the value + // "tls10server=1" in the GODEBUG environment variable. MinVersion uint16 // MaxVersion contains the maximum TLS version that is acceptable. @@ -1059,8 +1056,7 @@ func (c *Config) supportedVersions(isClient bool) []uint16 { if needFIPS() && (v < fipsMinVersion(c) || v > fipsMaxVersion(c)) { continue } - if (c == nil || c.MinVersion == 0) && - isClient && v < VersionTLS12 { + if (c == nil || c.MinVersion == 0) && v < VersionTLS12 { continue } if c != nil && c.MinVersion != 0 && v < c.MinVersion {