From 2baa668b37cc962f49344ccf2ab4ada133cda555 Mon Sep 17 00:00:00 2001
From: Alistair Smith <hi@alistair.sh>
Date: Wed, 7 May 2025 18:02:41 -0700
Subject: [PATCH] default to 1.2 min

---
 packages/bun-usockets/src/crypto/openssl.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/packages/bun-usockets/src/crypto/openssl.c b/packages/bun-usockets/src/crypto/openssl.c
index c8cc86c7cc..ddadb3b693 100644
--- a/packages/bun-usockets/src/crypto/openssl.c
+++ b/packages/bun-usockets/src/crypto/openssl.c
@@ -780,6 +780,8 @@ create_ssl_context_from_options(struct us_socket_context_options_t options) {
     else if (options.min_tls_version >= 1.1) min_version = TLS1_1_VERSION;
     else min_version = TLS1_VERSION;
     SSL_CTX_set_min_proto_version(ssl_context, min_version);
+  } else {
+    SSL_CTX_set_min_proto_version(ssl_context, TLS1_2_VERSION);
   }
 
   if (options.max_tls_version > 0.0) {