Merge pull request #76709 from aanderse/httpd-ssl

nixos/httpd: update default ssl protocols
This commit is contained in:
Aaron Andersen
2020-01-02 11:28:25 -05:00
committed by GitHub

View File

@@ -567,7 +567,7 @@ in
sslProtocols = mkOption {
type = types.str;
default = "All -SSLv2 -SSLv3 -TLSv1";
default = "All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1";
example = "All -SSLv2 -SSLv3";
description = "Allowed SSL/TLS protocol versions.";
};