From 547746e0d9b021cd761445946c449f1223f70446 Mon Sep 17 00:00:00 2001
From: Davide De Rosa <keeshux@gmail.com>
Date: Wed, 8 May 2019 16:13:14 +0200
Subject: [PATCH] Customize TLS security level (lowest)

---
 CHANGELOG.md                                           |  7 ++++++-
 .../Sources/Model/Profiles/HostConnectionProfile.swift |  1 +
 Podfile                                                |  4 ++--
 Podfile.lock                                           | 10 +++++-----
 4 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 339da5d2..d8d916b5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Unreleased
+
+### Fixed
+
+- TLS failed with some servers. [tunnelkit#97](https://github.com/keeshux/tunnelkit/issues/97)
+
 ## 1.6.1 Beta 1845 (2019-05-03)
 
 ### Added
@@ -20,7 +26,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - NordVPN double servers not connecting out of the box. [#78](https://github.com/passepartoutvpn/passepartout-ios/issues/78)
 - Authentication with OpenVPN AS. [tunnelkit#95](https://github.com/keeshux/tunnelkit/issues/95)
-- TLS failed with some servers. [tunnelkit#97](https://github.com/keeshux/tunnelkit/issues/97)
 
 ## 1.6.0 (2019-05-01)
 
diff --git a/Passepartout/Sources/Model/Profiles/HostConnectionProfile.swift b/Passepartout/Sources/Model/Profiles/HostConnectionProfile.swift
index 939f9634..7469bcb3 100644
--- a/Passepartout/Sources/Model/Profiles/HostConnectionProfile.swift
+++ b/Passepartout/Sources/Model/Profiles/HostConnectionProfile.swift
@@ -73,6 +73,7 @@ public class HostConnectionProfile: ConnectionProfile, Codable, Equatable {
         // forcibly override hostname with profile hostname (never nil)
         var sessionBuilder = builder.sessionConfiguration.builder()
         sessionBuilder.hostname = hostname
+        sessionBuilder.tlsSecurityLevel = 0 // lowest, tolerate widest range of certificates
         builder.sessionConfiguration = sessionBuilder.build()
 
         return builder.build()
diff --git a/Podfile b/Podfile
index 037ccb7a..04fd788d 100644
--- a/Podfile
+++ b/Podfile
@@ -5,8 +5,8 @@ use_frameworks!
 def shared_pods
     #pod 'TunnelKit', '~> 1.7.0'
     #pod 'TunnelKit/LZO', '~> 1.7.0'
-    pod 'TunnelKit', :git => 'https://github.com/keeshux/tunnelkit', :commit => '97f178c'
-    pod 'TunnelKit/LZO', :git => 'https://github.com/keeshux/tunnelkit', :commit => '97f178c'
+    pod 'TunnelKit', :git => 'https://github.com/keeshux/tunnelkit', :commit => 'ff0dfc4'
+    pod 'TunnelKit/LZO', :git => 'https://github.com/keeshux/tunnelkit', :commit => 'ff0dfc4'
     #pod 'TunnelKit', :path => '../../personal/tunnelkit'
     #pod 'TunnelKit/LZO', :path => '../../personal/tunnelkit'
     pod 'SSZipArchive'
diff --git a/Podfile.lock b/Podfile.lock
index 285ab425..4047d54a 100644
--- a/Podfile.lock
+++ b/Podfile.lock
@@ -17,8 +17,8 @@ PODS:
 DEPENDENCIES:
   - MBProgressHUD
   - SSZipArchive
-  - TunnelKit (from `https://github.com/keeshux/tunnelkit`, commit `97f178c`)
-  - TunnelKit/LZO (from `https://github.com/keeshux/tunnelkit`, commit `97f178c`)
+  - TunnelKit (from `https://github.com/keeshux/tunnelkit`, commit `ff0dfc4`)
+  - TunnelKit/LZO (from `https://github.com/keeshux/tunnelkit`, commit `ff0dfc4`)
 
 SPEC REPOS:
   https://github.com/cocoapods/specs.git:
@@ -29,12 +29,12 @@ SPEC REPOS:
 
 EXTERNAL SOURCES:
   TunnelKit:
-    :commit: 97f178c
+    :commit: ff0dfc4
     :git: https://github.com/keeshux/tunnelkit
 
 CHECKOUT OPTIONS:
   TunnelKit:
-    :commit: 97f178c
+    :commit: ff0dfc4
     :git: https://github.com/keeshux/tunnelkit
 
 SPEC CHECKSUMS:
@@ -44,6 +44,6 @@ SPEC CHECKSUMS:
   SwiftyBeaver: 4cc0080d2e23f980652e28978db11a5c9da39165
   TunnelKit: dd00b33e4c6d84f2d32390448a33ef5e37b1ac52
 
-PODFILE CHECKSUM: 24af6ecf7b2f2727caf4cd7f7ed3ef9065cdc11b
+PODFILE CHECKSUM: dff56ff4900ff32cc2868158bf3350c8ee6622fe
 
 COCOAPODS: 1.6.1