Disable TLS 1.0 and 1.1

servo · May 10, 2019 · 25333b6 · 25333b6
1 parent b1b47d8
commit 25333b6
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/components/net/connector.rs b/components/net/connector.rs
@@ -77,8 +77,13 @@ pub fn create_ssl_connector_builder(certs: &str) -> SslConnectorBuilder {
     ssl_connector_builder
         .set_cipher_list(DEFAULT_CIPHERS)
         .expect("could not set ciphers");
-    ssl_connector_builder
-        .set_options(SslOptions::NO_SSLV2 | SslOptions::NO_SSLV3 | SslOptions::NO_COMPRESSION);
+    ssl_connector_builder.set_options(
+        SslOptions::NO_SSLV2 |
+            SslOptions::NO_SSLV3 |
+            SslOptions::NO_TLSV1 |
+            SslOptions::NO_TLSV1_1 |
+            SslOptions::NO_COMPRESSION,
+    );
     ssl_connector_builder
 }