From 2972c3379c1ed8945d6dd09c574aa2b44be1509d Mon Sep 17 00:00:00 2001
From: retornam <retornam@users.noreply.github.com>
Date: Mon, 15 Dec 2025 06:08:10 +0000
Subject: [PATCH] Log message via tls_callback

- Deprecate TLS 1.0, allow TLS 1.1, TLS 1.2 and TLS 1.3
- Log message via tls_callback
---
 package/fa_adept_client.tcl | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/package/fa_adept_client.tcl b/package/fa_adept_client.tcl
index 20f11d2..8de369c 100644
--- a/package/fa_adept_client.tcl
+++ b/package/fa_adept_client.tcl
@@ -26,6 +26,7 @@ set caDir [file join [file dirname [info script]] "ca"]
 	public variable connectRetryIntervalSeconds 60
 	public variable fastRetryIntervalSeconds 5
 	public variable showTraffic 0
+	public variable debugTLS 0
 	public variable mac
 
 	# configuration hooks for actions the client wants to trigger
@@ -124,6 +125,14 @@ set caDir [file join [file dirname [info script]] "ca"]
 				}
 			}
 
+			message {
+				lassign $args direction version
+				if {$debugTLS} {
+				        logger "TLS version: $version"
+				        logger "$direction TLS message: $message"
+			        }
+			}
+
 			default {
 				logger "unhandled TLS callback: $cmd $channel $args"
 			}
@@ -215,7 +224,10 @@ set caDir [file join [file dirname [info script]] "ca"]
 						-cadir $::fa_adept::caDir \
 						-ssl2 0 \
 						-ssl3 0 \
-						-tls1 1 \
+						-tls1 0 \
+						-tls1.1 1 \
+						-tls1.2 1 \
+						-tls1.3 1 \
 						-require 1 \
 						-command [list $this tls_callback]} catchResult] == 1} {
 			logger "TLS initialization with adept server at $host/$port failed: $catchResult"