Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable SSLv3 for relay protocol #234

Closed
tfheen opened this Issue Oct 15, 2014 · 4 comments

Comments

Projects
None yet
4 participants
@tfheen
Copy link

tfheen commented Oct 15, 2014

Given the CVE that landed last night for SSLv3, it would be useful if one could control the protocols supported by the relay plugin.

(It's already possible to control what protocols you support when connecting to a server)

@torhve

This comment has been minimized.

Copy link
Contributor

torhve commented Oct 15, 2014

👍

@lorenzhs

This comment has been minimized.

Copy link

lorenzhs commented Oct 20, 2014

👍

@flashcode flashcode closed this in 134a5f5 Oct 26, 2014

@flashcode

This comment has been minimized.

Copy link
Member

flashcode commented Oct 26, 2014

Done, new option relay.network.ssl_priorities.

Default value is PERFORMANCE, so you can try for example:
/set relay.network.ssl_priorities "PERFORMANCE:-VERS-SSL3.0"

@flashcode

This comment has been minimized.

Copy link
Member

flashcode commented Nov 16, 2014

Since cdca309, the default value of option relay.network.ssl_priorities is NORMAL:-VERS-SSL3.0.

@flashcode flashcode added this to the 1.1 milestone Nov 16, 2014

@flashcode flashcode self-assigned this Nov 16, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.