Support older versions of TLS regardless of Go defaults (#671)

* Explicitly allow TLS1.0 in HTTP client * Add CHANGELOG.md entry
ffuf · Apr 21, 2023 · a3bd865 · a3bd865
1 parent 627c871
commit a3bd865
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,7 @@
 - master
   - New
   - Changed
+    - Explicitly allow TLS1.0 
 
 - v2.0.0
   - New

diff --git a/pkg/runner/simple.go b/pkg/runner/simple.go
@@ -59,6 +59,7 @@ func NewSimpleRunner(conf *ffuf.Config, replay bool) ffuf.RunnerProvider {
 			TLSHandshakeTimeout: time.Duration(time.Duration(conf.Timeout) * time.Second),
 			TLSClientConfig: &tls.Config{
 				InsecureSkipVerify: true,
+				MinVersion:         tls.VersionTLS10,
 				Renegotiation:      tls.RenegotiateOnceAsClient,
 				ServerName:         conf.SNI,
 			},