diff --git a/src/rabbit_ssl_options.erl b/src/rabbit_ssl_options.erl index 3150c6a6..bfea5e92 100644 --- a/src/rabbit_ssl_options.erl +++ b/src/rabbit_ssl_options.erl @@ -18,8 +18,22 @@ -export([fix/1]). -%% POODLE --define(BAD_SSL_PROTOCOL_VERSIONS, [sslv3]). + +-define(BAD_SSL_PROTOCOL_VERSIONS, [ + %% POODLE + sslv3, + + %% Client side of TLS 1.3 is not yet + %% implemented in Erlang/OTP 22.0 + %% prereleases. As a consequence, + %% not sure about the stability of + %% the server side. + %% + %% FIXME: Revisit this decision when + %% Erlang/OTP 22.0 final release is + %% out. + 'tlsv1.3' + ]). -spec fix(rabbit_types:infos()) -> rabbit_types:infos().