If using WebHooks over HTTPS (i.e. in prod), only allow TLSv1.2 and T…

…LSv1.3 as per https://sonarcloud.io/project/issues?id=SentryPeer_SentryPeer&createdAt=2022-08-22T17%3A19%3A12%2B0000
SentryPeer · Aug 22, 2022 · e789386 · e789386
1 parent 5935852
commit e789386
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/json_logger.c b/src/json_logger.c
@@ -268,6 +268,9 @@ int json_http_post_bad_actor(const sentrypeer_config *config,
 
 	curl_easy_setopt(curl, CURLOPT_USERAGENT, SENTRYPEER_USERAGENT);
 
+	// Enables TLSv1.2 / TLSv1.3 version only
+	curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2);
+
 	// Complete within 2 seconds
 	curl_easy_setopt(curl, CURLOPT_TIMEOUT, 2L);