Project

General

Profile

Forums » Development »

[Solved] disabling TLSv1

Added by jeffzrmann about 9 years ago

HI,
We had a need for the ability to disable TLSv1 in the lighttpd configuration file.
I added an option for ssl configuration, ssl.use-tlsv1.
I thought I'd share the code change for potential use in a future release.

Regards,
Jeff ZImmerman

tlsv1.patch (2.8 KB) tlsv1.patch

Replies (1)

RE: [Solved] disabling TLSv1 - Added by gstrauss over 3 years ago

Since lighttpd 1.4.48, lighttpd supports ssl.openssl.ssl-conf-cmd where you can specify things like
ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1.2")

See lighttpd TLS documentation

    (1-1/1)