Browse Source

Remove SSLv2 and SSLv3 references from the example relayd.conf and the

relevant example snippet in the relayd.conf(5) man page.
Change the default SSL protocols in the example file/man page to
"no tlsv1.0" (suggested by sthen@), which will enable the TLSv1.1
and TLSv1.2 protocols only.
feedback/ok jsing@ reyk@ sthen@
OPENBSD_5_7
lteo 10 years ago
parent
commit
10d3ae4825
1 changed files with 2 additions and 2 deletions
  1. +2
    -2
      src/etc/examples/relayd.conf

+ 2
- 2
src/etc/examples/relayd.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: relayd.conf,v 1.1 2014/07/11 21:20:10 deraadt Exp $
# $OpenBSD: relayd.conf,v 1.2 2014/10/21 02:29:54 lteo Exp $
# #
# Macros # Macros
# #
@ -45,7 +45,7 @@ http protocol httpssl {
# Various TCP performance options # Various TCP performance options
tcp { nodelay, sack, socket buffer 65536, backlog 128 } tcp { nodelay, sack, socket buffer 65536, backlog 128 }
# ssl { no sslv2, sslv3, tlsv1, ciphers HIGH }
# ssl { no tlsv1.0, ciphers HIGH }
# ssl session cache disable # ssl session cache disable
} }


Loading…
Cancel
Save