Ticket #1911: patch.tls

File patch.tls, 1.0 KB (added by loganaden@…, 7 years ago)

[PATCH] Deprecate TLS 1.0 and TLS 1.1 for March 2020

Line 
1# HG changeset patch
2# User Loganaden Velvindron <logan@cyberstorm.mu>
3# Date 1577960007 -14400
4# Thu Jan 02 14:13:27 2020 +0400
5# Node ID 5440576e3cf18c9a777db8ae9d163f6d05144ca3
6# Parent f1720934c45be1c6469841a55d1f31fe9a630c85
7Deprecate TLS 1.0 and TLS 1.1 in preparation for March 2020.
8
9See: https://www.ietf.org/id/draft-ietf-tls-oldversions-deprecate-05.txt
10
11diff -r f1720934c45b -r 5440576e3cf1 src/event/ngx_event_openssl.c
12--- a/src/event/ngx_event_openssl.c Fri Dec 27 19:43:01 2019 +0300
13+++ b/src/event/ngx_event_openssl.c Thu Jan 02 14:13:27 2020 +0400
14@@ -349,12 +349,12 @@
15 #endif
16
17 #ifdef SSL_CTX_set_min_proto_version
18- SSL_CTX_set_min_proto_version(ssl->ctx, 0);
19+ SSL_CTX_set_min_proto_version(ssl->ctx, TLS1_2_VERSION);
20 SSL_CTX_set_max_proto_version(ssl->ctx, TLS1_2_VERSION);
21 #endif
22
23 #ifdef TLS1_3_VERSION
24- SSL_CTX_set_min_proto_version(ssl->ctx, 0);
25+ SSL_CTX_set_min_proto_version(ssl->ctx, TLS1_2_VERSION);
26 SSL_CTX_set_max_proto_version(ssl->ctx, TLS1_3_VERSION);
27 #endif
28