mirror of
https://github.com/webmin/webmin.git
synced 2026-03-20 16:50:24 +00:00
Disable SSL/TLS renegotiation
Commit2b77e8f020allows to disable TLS < 1.3, extend it to always disable SSL/TLS renegotiation even for this older TLS protocols.2b77e8f020https://sourceforge.net/p/webadmin/bugs/4590/
This commit is contained in:
@@ -4664,6 +4664,10 @@ if ($config{'ssl_honorcipherorder'}) {
|
||||
&Net::SSLeay::OP_CIPHER_SERVER_PREFERENCE)';
|
||||
}
|
||||
|
||||
# Disable TLS renegotiation when possible, OpenSSL >= 1.1.0h
|
||||
eval 'Net::SSLeay::CTX_set_options($ssl_ctx,
|
||||
&Net::SSLeay::OP_NO_RENEGOTIATION)';
|
||||
|
||||
return { 'keyfile' => $keyfile,
|
||||
'keytime' => $kst[9],
|
||||
'certfile' => $certfile,
|
||||
|
||||
Reference in New Issue
Block a user