net模块修改

net/ssl/openssl_ssl_util.cc

• int GetNetSSLVersion(SSL* ssl)  加入版本支持

int GetNetSSLVersion(SSL* ssl) {

#if 0 //zhibin:test
if(true) return SSL_CONNECTION_VERSION_TLS1_1;
#endif

  switch (SSL_version(ssl)) {
    case TLS1_VERSION:
      return SSL_CONNECTION_VERSION_TLS1;
    case TLS1_1_VERSION:
#ifdef OPENSSL_ZHI_CUST
    case SM1_1_VERSION:
#endif        
      return SSL_CONNECTION_VERSION_TLS1_1;
    case TLS1_2_VERSION:
      return SSL_CONNECTION_VERSION_TLS1_2;
    case TLS1_3_VERSION:
      return SSL_CONNECTION_VERSION_TLS1_3;
#if 0//def OPENSSL_ZHI_CUST //only 3 bits for version. All is ocuppied.
    case SM1_1_VERSION:
      return SSL_CONNECTION_VERSION_GMTLSv1;
#endif
    default:
      NOTREACHED();
      return SSL_CONNECTION_VERSION_UNKNOWN;
  }

 

net/ssl/ssl_cipher_suite_names.cc （没用。因为新协议不能添加。只有3个bit留给ssl 版本。已经都被占了。）

cefclient.exe -url=https://kjt.hebei.gov.cn/www/index_ssl/index.html  -ignore-certificate-errors