f7e2cb
diff -up firefox-68.2.0/security/manager/ssl/nsNSSComponent.cpp.old firefox-68.2.0/security/manager/ssl/nsNSSComponent.cpp
f7e2cb
--- firefox-68.2.0/security/manager/ssl/nsNSSComponent.cpp.old	2019-10-24 14:20:21.227037984 +0200
f7e2cb
+++ firefox-68.2.0/security/manager/ssl/nsNSSComponent.cpp	2019-10-24 14:45:52.769506967 +0200
f7e2cb
@@ -996,6 +996,9 @@ void nsNSSComponent::FillTLSVersionRange
f7e2cb
     return;
f7e2cb
   }
f7e2cb
 
f7e2cb
+  // Enable TLS 1.3 as our NSS supports it.
f7e2cb
+  supported.max = 0x304;
f7e2cb
+
f7e2cb
   // Clip the defaults by what NSS actually supports to enable
f7e2cb
   // working with a system NSS with different ranges.
f7e2cb
   rangeOut.min = std::max(rangeOut.min, supported.min);