Index: ChangeLog
==================================================================
--- ChangeLog
+++ ChangeLog
@@ -1,5 +1,11 @@
+2000-08-14  Jeff Hobbs  <hobbs@scriptics.com>
+
+	* tls.c (Tls_Init): changed it to require 8.3.2 when Tcl_InitStubs
+	was called because we don't want people using TLS with the
+	original stacked channel implementation.
+
 2000-07-26  Jeff Hobbs  <hobbs@scriptics.com>
 
 	* merged all changes from tls-1-3-io-rewrite back into main branch
 
 	* tests/tlsIO.test: updated comments, fixed a pcCrash case that

Index: tls.c
==================================================================
--- tls.c
+++ tls.c
@@ -1,9 +1,9 @@
 /*
  * Copyright (C) 1997-1999 Matt Newman <matt@novadigm.com>
  *
- * $Header: /home/rkeene/tmp/cvs2fossil/../tcltls/tls/tls/tls.c,v 1.7 2000/07/27 01:58:18 hobbs Exp $
+ * $Header: /home/rkeene/tmp/cvs2fossil/../tcltls/tls/tls/tls.c,v 1.8 2000/08/14 21:55:12 hobbs Exp $
  *
  * TLS (aka SSL) Channel - can be layered on any bi-directional
  * Tcl_Channel (Note: Requires Trf Core Patch)
  *
  * This was built (almost) from scratch based upon observation of
@@ -1139,14 +1139,21 @@
 int
 Tls_Init(Tcl_Interp *interp)		/* Interpreter in which the package is
                                          * to be made available. */
 {
 #if TCL_MAJOR_VERSION >= 8 && TCL_MINOR_VERSION >= 2
-    if (!Tcl_InitStubs(interp, TCL_VERSION, 0)) {
+    /*
+     * The original 8.2.0 stacked channel implementation (and the patch
+     * that preceded it) had problems with scalability and robustness.
+     * These were address in 8.3.2 / 8.4a2, so we now require that as a
+     * minimum for TLS 1.4+.
+     */
+    if (Tcl_InitStubs(interp, "8.3.2", 0) == NULL) {
         return TCL_ERROR;
     }
 #endif
+
     if (SSL_library_init() != 1) {
         Tcl_AppendResult(interp, "could not initialize SSL library", NULL);
 	return TCL_ERROR;
     }
     SSL_load_error_strings();