adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

Disable all weak SSL/TLS protocols #995

New Issue
Open
opened 2026-10-05 04:57:37 +02:00 by adam · 0 comments
adam commented 2026-10-05 04:57:37 +02:00
Owner
Copy link
Copy source

By the default configuration, it seems that TLSv1.1 is enabled by default.

Nowadays the SSL protocols setup should be:
All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3

I add All cause the current version of the ZNC doesn't support enabling/disabling the TSLv1.3 protocol in explicit way; it seems it main relay on OpenSSL version. So I suggest to pass All so TLSv1.3 should be automatically allowed even if it is not added in explicit way. For security reason I suggest to remove All, once the TLSv1.3 explicit declaration will be enabled.

By the default configuration, it seems that TLSv1.1 is enabled by default. Nowadays the SSL protocols setup should be: All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3 I add All cause the current version of the ZNC doesn't support enabling/disabling the TSLv1.3 protocol in explicit way; it seems it main relay on OpenSSL version. So I suggest to pass All so TLSv1.3 should be automatically allowed even if it is not added in explicit way. For security reason I suggest to remove All, once the TLSv1.3 explicit declaration will be enabled. <!-- github-sync-id:974720662 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#995