diff options
| author | Tatsuya Kinoshita <tats@debian.org> | 2021-02-10 12:55:34 +0000 |
|---|---|---|
| committer | Tatsuya Kinoshita <tats@debian.org> | 2021-02-10 12:55:34 +0000 |
| commit | 1ec090b0d3b828d142904e1031cde9b44c454585 (patch) | |
| tree | e18138ada3facb27b908295686ca501198076444 | |
| parent | Mention ssl_* options as a workaround for SSL error (diff) | |
| download | w3m-1ec090b0d3b828d142904e1031cde9b44c454585.tar.gz w3m-1ec090b0d3b828d142904e1031cde9b44c454585.zip | |
Disable TLSv1.0 and TLSv1.1 by default
| -rw-r--r-- | doc-jp/README.SSL | 2 | ||||
| -rw-r--r-- | fm.h | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/doc-jp/README.SSL b/doc-jp/README.SSL index d7f26c7..db1876f 100644 --- a/doc-jp/README.SSL +++ b/doc-jp/README.SSL @@ -26,7 +26,7 @@ SSL サポートについて ssl_forbid_method 使わないSSLメソッドのリスト(2: SSLv2, 3: SSLv3, t: TLSv1.0, 5: TLSv1.1, 6: TLSv1.2, 7: TLSv1.3) - (デフォルトは2, 3). + (デフォルトは2, 3, t, 5). ssl_min_version 最小のSSLバージョン, OpenSSL 1.1以上で有効(TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3のいずれか) (デフォルトは<NULL>). @@ -1190,7 +1190,7 @@ global int ssl_path_modified init(FALSE); #endif /* defined(USE_SSL) && * defined(USE_SSL_VERIFY) */ #ifdef USE_SSL -global char *ssl_forbid_method init("2, 3"); +global char *ssl_forbid_method init("2, 3, t, 5"); #ifdef SSL_CTX_set_min_proto_version global char *ssl_min_version init(NULL); #endif |