From 916c2774fae701443e251b7776efff780b4d5744 Mon Sep 17 00:00:00 2001 From: Leon Klingele Date: Thu, 11 May 2017 22:23:47 +0200 Subject: [PATCH 1/2] Update default TLS protocol version in the server.conf.in config file See https://github.com/strukturag/phoenix/blob/31b7f25f4815e6e0b8e7c4010f6e9a71c4165b19/tls.go#L15 --- server.conf.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server.conf.in b/server.conf.in index 1641ee85e..ae9d34500 100644 --- a/server.conf.in +++ b/server.conf.in @@ -27,7 +27,7 @@ listen = 127.0.0.1:8080 ; Full path to PEM encoded private key. ;key = server.key ; Mimimal supported encryption standard (SSLv3, TLSv1, TLSv1.1 or TLSv1.2). -;minVersion = SSLv3 +;minVersion = TLSv1.2 ; HTTPS socket read timeout in seconds. ;readtimeout = 10 ; HTTPS socket write timeout in seconds. From d99334afd38be2643997c0f044f58c4dcf09b26a Mon Sep 17 00:00:00 2001 From: Leon Klingele Date: Sat, 13 May 2017 02:01:02 +0200 Subject: [PATCH 2/2] Do not mention 'SSLv3' in the server.conf.in config file --- server.conf.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server.conf.in b/server.conf.in index ae9d34500..26ace0fe3 100644 --- a/server.conf.in +++ b/server.conf.in @@ -26,7 +26,7 @@ listen = 127.0.0.1:8080 ;certificate = server.crt ; Full path to PEM encoded private key. ;key = server.key -; Mimimal supported encryption standard (SSLv3, TLSv1, TLSv1.1 or TLSv1.2). +; Mimimal supported encryption standard (TLSv1, TLSv1.1 or TLSv1.2). ;minVersion = TLSv1.2 ; HTTPS socket read timeout in seconds. ;readtimeout = 10