https://bugs.winehq.org/show_bug.cgi?id=46161
--- Comment #12 from Marcel marcel@meulemans.org --- Created attachment 62952 --> https://bugs.winehq.org/attachment.cgi?id=62952 Easier removing protocols not supported by wine code
(In reply to Jacek Caban from comment #11)
With my patch, we should pass -VERS-TLS1.3, so it shouldn't be a problem that it's part of NORMAL. Is it not passed for some reason?
I think you missed the same fix in "schan_imp_create_session" which still advertises TLS1.3 via NORMAL. And I misread your solution and came up with some overly complex code (see new patch).
Also I think you may have missed the header file with the define for SP_PROT_TLS1_2_CLIENT?