]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: set ssl-min-ver in ambiguous configurations
authorWilliam Lallemand <wlallemand@haproxy.com>
Tue, 2 Jun 2020 08:52:24 +0000 (10:52 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 2 Jun 2020 09:13:12 +0000 (11:13 +0200)
commit50df1cb1e51bee0428db236deead46bd3ca98d7a
treec6f7f64accee12d4a22b223faf6a1461136125b5
parent975564784fee089d6d03d8e85e93f2bff5d7253b
MINOR: ssl: set ssl-min-ver in ambiguous configurations

Using ssl-max-ver without ssl-min-ver is ambiguous.

When the ssl-min-ver is not configured, and ssl-max-ver is set to a
value lower than the default ssl-min-ver (which is TLSv1.2 currently),
set the ssl-min-ver to the value of ssl-max-ver, and emit a warning.
doc/configuration.txt
src/ssl_sock.c