Extend ssl_forbid_method to disable TLSv1.1

Origin: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874218#5
This commit is contained in:
se
2018-01-06 19:10:52 +09:00
committed by Tatsuya Kinoshita
parent d7afaf6808
commit 1b23ebf644
7 changed files with 14 additions and 10 deletions

2
rc.c
View File

@@ -202,7 +202,7 @@ static int OptionEncode = FALSE;
#define CMT_SSL_CA_PATH N_("Path to directory for PEM encoded certificates of CAs")
#define CMT_SSL_CA_FILE N_("File consisting of PEM encoded certificates of CAs")
#endif /* USE_SSL_VERIFY */
#define CMT_SSL_FORBID_METHOD N_("List of forbidden SSL methods (2: SSLv2, 3: SSLv3, t:TLSv1)")
#define CMT_SSL_FORBID_METHOD N_("List of forbidden SSL methods (2: SSLv2, 3: SSLv3, t: TLSv1.0, t1.1: TLSv1.1)")
#endif /* USE_SSL */
#ifdef USE_COOKIE
#define CMT_USECOOKIE N_("Enable cookie processing")