Merge pull request #76709 from aanderse/httpd-ssl

nixos/httpd: update default ssl protocols
This commit is contained in:
Aaron Andersen 2020-01-02 11:28:25 -05:00 committed by GitHub
commit ebf58a3404
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -567,7 +567,7 @@ in
sslProtocols = mkOption {
type = types.str;
default = "All -SSLv2 -SSLv3 -TLSv1";
default = "All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1";
example = "All -SSLv2 -SSLv3";
description = "Allowed SSL/TLS protocol versions.";
};