From 8e6bd270ca5ab04d1cd952f2d9d3b5ca90d78fab Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 23 Oct 2025 11:54:05 +0100
Subject: Set the security level on the client context as well as the server
 one.

---
 src/modules/extra/m_ssl_openssl.cpp | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/modules/extra/m_ssl_openssl.cpp b/src/modules/extra/m_ssl_openssl.cpp
index 9d0591778..36dac31c4 100644
--- a/src/modules/extra/m_ssl_openssl.cpp
+++ b/src/modules/extra/m_ssl_openssl.cpp
@@ -442,9 +442,12 @@ namespace OpenSSL
 			SetContextOptions("server", tag, ctx);
 			SetContextOptions("client", tag, clientctx);
 
-			const auto securitylevel = tag->getNum<int>("securitylevel", 0, 0, 10);
-			if (securitylevel)
+			const auto securitylevel = tag->getNum<int>("securitylevel", -1, -1, 10);
+			if (securitylevel >= 0)
+			{
 				ctx.SetSecurityLevel(securitylevel);
+				clientctx.SetSecurityLevel(securitylevel);
+			}
 
 			/* Load our keys and certificates
 			 * NOTE: OpenSSL's error logging API sucks, don't blame us for this clusterfuck.
-- 
cgit v1.3.1-10-gc9f91