Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

do not default to very old protocols, let the jvm pick a secure value #721

Merged
merged 1 commit into from
May 30, 2023

Conversation

TheGoesen
Copy link
Contributor

TLS 1.2 is fairly old and better alternatives are available. It seems better to rely on the defaults of oracle than to to manually downgrade settings.

@belaban belaban merged commit 775058e into belaban:master May 30, 2023
@belaban
Copy link
Owner

belaban commented May 30, 2023

Excellent! I assume you can live with sni_matchers for hostname verification then?

@TheGoesen
Copy link
Contributor Author

I still need to actually test this, I just upgraded everything to 5.2.14 using SYM encrypt... o well

@belaban
Copy link
Owner

belaban commented May 30, 2023

OK, meanwhile the change seems warranted: with a null protocols value, the most recent protocol should be used, ie. 1.3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants