提交 3691279e authored 作者: Brian West's avatar Brian West

FS-6727 allow 1.1 and 1.2, They should probably fix that soon

上级 b2162142
...@@ -156,8 +156,6 @@ static void verto_init_ssl(verto_profile_t *profile) ...@@ -156,8 +156,6 @@ static void verto_init_ssl(verto_profile_t *profile)
SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_SSLv3); SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_SSLv3);
/* Disable TLSv1 */ /* Disable TLSv1 */
SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_TLSv1); SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_TLSv1);
/* Disable TLSv1_1 */
SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_TLSv1_1);
/* Disable Compression CRIME (Compression Ratio Info-leak Made Easy) */ /* Disable Compression CRIME (Compression Ratio Info-leak Made Easy) */
SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_COMPRESSION); SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_COMPRESSION);
......
...@@ -102,8 +102,6 @@ void init_ssl(void) { ...@@ -102,8 +102,6 @@ void init_ssl(void) {
SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_SSLv3); SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_SSLv3);
/* Disable TLSv1 */ /* Disable TLSv1 */
SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_TLSv1); SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_TLSv1);
/* Disable TLSv1_1 */
SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_TLSv1_1);
/* Disable Compression CRIME (Compression Ratio Info-leak Made Easy) */ /* Disable Compression CRIME (Compression Ratio Info-leak Made Easy) */
SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_COMPRESSION); SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_COMPRESSION);
/* set the local certificate from CertFile */ /* set the local certificate from CertFile */
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论