diff options
| author | Jack Lloyd <[email protected]> | 2018-08-21 15:43:34 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2018-08-22 15:13:14 -0400 |
| commit | e05a7337add6c5f61d5abc05bb69c8d0698aa3ef (patch) | |
| tree | 8bb911536d39c43385a59d1bc9a09b2b14bd7075 /src/lib/tls | |
| parent | 2fc2598ebab23aa63f7be30c8a2eff6afb262fb3 (diff) | |
Default disable support for TLS v1.0/v1.1 and all CBC and CCM suites
Diffstat (limited to 'src/lib/tls')
| -rw-r--r-- | src/lib/tls/tls_policy.cpp | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/src/lib/tls/tls_policy.cpp b/src/lib/tls/tls_policy.cpp index 5e8150e4f..c2d3ccf26 100644 --- a/src/lib/tls/tls_policy.cpp +++ b/src/lib/tls/tls_policy.cpp @@ -45,16 +45,16 @@ std::vector<std::string> Policy::allowed_ciphers() const "ChaCha20Poly1305", "AES-256/GCM", "AES-128/GCM", - "AES-256/CCM", - "AES-128/CCM", + //"AES-256/CCM", + //"AES-128/CCM", //"AES-256/CCM(8)", //"AES-128/CCM(8)", //"Camellia-256/GCM", //"Camellia-128/GCM", //"ARIA-256/GCM", //"ARIA-128/GCM", - "AES-256", - "AES-128", + //"AES-256", + //"AES-128", //"Camellia-256", //"Camellia-128", //"SEED" @@ -319,8 +319,8 @@ bool Policy::acceptable_ciphersuite(const Ciphersuite& ciphersuite) const bool Policy::allow_client_initiated_renegotiation() const { return false; } bool Policy::allow_server_initiated_renegotiation() const { return false; } bool Policy::allow_insecure_renegotiation() const { return false; } -bool Policy::allow_tls10() const { return true; } -bool Policy::allow_tls11() const { return true; } +bool Policy::allow_tls10() const { return false; } +bool Policy::allow_tls11() const { return false; } bool Policy::allow_tls12() const { return true; } bool Policy::allow_dtls10() const { return false; } bool Policy::allow_dtls12() const { return true; } |