spec/tls_spec: make sure TLS 1.3 isn't used in banned ciphers test

Author: daurnimator

spec/tls_spec.lua

@@ -17,14 +17,15 @@ describe("http.tls module", function()
 		local s, c = ca.assert(cs.pair())
 		local cq = cqueues.new()
 		cq:wrap(function()
-			local ctx = openssl_ctx.new("TLSv1", false)
+			local ctx = openssl_ctx.new("TLS", false)
 			assert(c:starttls(ctx))
 			local ssl = assert(s:checktls())
 			local cipher = ssl:getCipherInfo()
 			assert(tls.banned_ciphers[cipher.name])
 		end)
 		cq:wrap(function()
-			local ctx = openssl_ctx.new("TLSv1", true)
+			local ctx = openssl_ctx.new("TLS", true)
+			ctx:setOptions(openssl_ctx.OP_NO_TLSv1_3)
 			ctx:setCipherList(banned_cipher_list)
 			ctx:setEphemeralKey(openssl_pkey.new{ type = "EC", curve = "prime256v1" })
 			local crt = openssl_x509.new()