From 0a0173fc6b93ad3411084763ee79ea3d778c32a5 Mon Sep 17 00:00:00 2001
From: Amos Jeffries <squid3@treenet.co.nz>
Date: Mon, 29 Jun 2015 05:42:34 -0700
Subject: [PATCH] Set HTTPS proxy default to TLS/1.0+ with no SSLv3 support

---
 src/cf.data.pre | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/cf.data.pre b/src/cf.data.pre
index 1b61f5cf54..fc4a21cf6d 100644
--- a/src/cf.data.pre
+++ b/src/cf.data.pre
@@ -2591,7 +2591,7 @@ COMMENT_END
 NAME: tls_outgoing_options
 IFDEF: USE_GNUTLS||USE_OPENSSL
 TYPE: securePeerOptions
-DEFAULT: disable
+DEFAULT: min-version=1.0 options=NO_SSLv3
 LOC: Security::ProxyOutgoingConfig
 DOC_START
 	disable		Do not support https:// URLs.
-- 
2.47.2