From: Amos Jeffries <squid3@treenet.co.nz>
Date: Mon, 29 Jun 2015 12:42:34 +0000 (-0700)
Subject: Set HTTPS proxy default to TLS/1.0+ with no SSLv3 support
X-Git-Tag: merge-candidate-3-v1~38^2~21^2~9
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0a0173fc6b93ad3411084763ee79ea3d778c32a5;p=thirdparty%2Fsquid.git

Set HTTPS proxy default to TLS/1.0+ with no SSLv3 support
---

diff --git a/src/cf.data.pre b/src/cf.data.pre
index 1b61f5cf54..fc4a21cf6d 100644
--- a/src/cf.data.pre
+++ b/src/cf.data.pre
@@ -2591,7 +2591,7 @@ COMMENT_END
 NAME: tls_outgoing_options
 IFDEF: USE_GNUTLS||USE_OPENSSL
 TYPE: securePeerOptions
-DEFAULT: disable
+DEFAULT: min-version=1.0 options=NO_SSLv3
 LOC: Security::ProxyOutgoingConfig
 DOC_START
 	disable		Do not support https:// URLs.