From c06c8db08de0b141fd9448925b42b669612caf20 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Simon=20St=C3=BCrz?= <simon.stuerz@nymea.io>
Date: Thu, 27 Nov 2025 09:04:53 +0100
Subject: [PATCH] server: Add fallback to TSL 1.2 or later for encrypted
 connections

---
 libnymea-core/servermanager.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/libnymea-core/servermanager.cpp b/libnymea-core/servermanager.cpp
index 63ee3ede..d312f4ec 100644
--- a/libnymea-core/servermanager.cpp
+++ b/libnymea-core/servermanager.cpp
@@ -109,7 +109,8 @@ ServerManager::ServerManager(Platform *platform, NymeaConfiguration *configurati
             }
         }
         if (certsLoaded) {
-            m_sslConfiguration.setProtocol(QSsl::TlsV1_3OrLater);
+             // iOS still requires a 1.2+ fallback for local connections, the rest seems to work with 1.3
+            m_sslConfiguration.setProtocol(QSsl::TlsV1_2OrLater);
             m_sslConfiguration.setPrivateKey(m_certificateKey);
             m_sslConfiguration.setLocalCertificate(m_certificate);
         }