From 1ec090b0d3b828d142904e1031cde9b44c454585 Mon Sep 17 00:00:00 2001 From: Tatsuya Kinoshita Date: Wed, 10 Feb 2021 21:55:34 +0900 Subject: Disable TLSv1.0 and TLSv1.1 by default --- fm.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'fm.h') diff --git a/fm.h b/fm.h index 1f884be..0c63c8e 100644 --- a/fm.h +++ b/fm.h @@ -1190,7 +1190,7 @@ global int ssl_path_modified init(FALSE); #endif /* defined(USE_SSL) && * defined(USE_SSL_VERIFY) */ #ifdef USE_SSL -global char *ssl_forbid_method init("2, 3"); +global char *ssl_forbid_method init("2, 3, t, 5"); #ifdef SSL_CTX_set_min_proto_version global char *ssl_min_version init(NULL); #endif -- cgit v1.2.3