Open Bug 1626693 Opened 5 years ago Updated 1 year ago

Add flag to disable TLS 1.0 and 1.1 by default

Categories

(NSS :: Build, task, P4)

Tracking

(Not tracked)

People

(Reporter: sjw+bugzilla, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: good-first-bug, Whiteboard: [nss-fx])

Attachments

(1 file)

There is currently only a NSS_DISABLE_TLS_1_3 flag. It would be great to have a similar flag for TLS 1.0 and 1.1.

  • GnuTLS has --disable-mark-tls11-supported
  • OpenSSL has OPENSSL_TLS_SECURITY_LEVEL

Marking this 'good-first-bug', patches welcome.

Keywords: good-first-bug
Priority: -- → P4
Blocks: 1648191
Whiteboard: [nss-fx]
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: