1 Disable SSLv3 as a default SSL/TLS version in erlang per the email thread at: |
1 Disable SSLv3 as a default SSL/TLS version in erlang per the email thread at: |
2 http://erlang.org/pipermail/erlang-questions/2014-October/081394.html |
2 http://erlang.org/pipermail/erlang-questions/2014-October/081394.html |
3 |
3 |
4 This change is already known upstream. |
4 This change is already known upstream. |
5 |
5 |
6 --- otp_src_R15B03/lib/ssl/src/ssl_internal.hrl.orig 2014-12-17 17:17:44.775898708 -0800 |
6 --- otp_src_17.5/lib/ssl/src/ssl_internal.hrl.orig 2015-04-01 17:25:29.828347756 -0700 |
7 +++ otp_src_R15B03/lib/ssl/src/ssl_internal.hrl 2014-12-18 04:46:24.785282064 -0800 |
7 +++ otp_src_17.5/lib/ssl/src/ssl_internal.hrl 2015-04-01 17:29:15.577854889 -0700 |
8 @@ -69,7 +69,7 @@ |
8 @@ -67,8 +67,8 @@ |
9 -define(TRUE, 0). |
9 -define(TRUE, 0). |
10 -define(FALSE, 1). |
10 -define(FALSE, 1). |
11 |
11 |
12 --define(DEFAULT_SUPPORTED_VERSIONS, [tlsv1, sslv3]). %% Add 'tlsv1.1' in R16 |
12 --define(ALL_SUPPORTED_VERSIONS, ['tlsv1.2', 'tlsv1.1', tlsv1, sslv3]). |
13 +-define(DEFAULT_SUPPORTED_VERSIONS, [tlsv1]). %% Add 'tlsv1.1' in R16 |
13 --define(MIN_SUPPORTED_VERSIONS, ['tlsv1.1', tlsv1, sslv3]). |
14 -define(ALL_SUPPORTED_VERSIONS, ['tlsv1.2', 'tlsv1.1', tlsv1, sslv3]). |
14 +-define(ALL_SUPPORTED_VERSIONS, ['tlsv1.2', 'tlsv1.1', tlsv1]). |
|
15 +-define(MIN_SUPPORTED_VERSIONS, ['tlsv1.1', tlsv1]). |
|
16 -define(ALL_DATAGRAM_SUPPORTED_VERSIONS, ['dtlsv1.2', dtlsv1]). |
|
17 -define(MIN_DATAGRAM_SUPPORTED_VERSIONS, ['dtlsv1.2', dtlsv1]). |
15 |
18 |
16 -record(ssl_options, { |
|