aboutsummaryrefslogtreecommitdiffstats
path: root/library/cpp
diff options
context:
space:
mode:
authormolotkov-and <molotkov-and@ydb.tech>2023-05-16 16:22:03 +0300
committermolotkov-and <molotkov-and@ydb.tech>2023-05-16 16:22:03 +0300
commit11ee8d772052d92fb38b400a48e17c8123cacec0 (patch)
tree1651109a736206e1df83e4cfef583f419102a449 /library/cpp
parent795c2e84c391ffc80b4e79935f114604e76421ee (diff)
downloadydb-11ee8d772052d92fb38b400a48e17c8123cacec0.tar.gz
Add SSL_OP_NO_TLSv1_1, SSL_OP_NO_TLSv1 ssl options
Diffstat (limited to 'library/cpp')
-rw-r--r--library/cpp/actors/http/http_proxy_ssl.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/library/cpp/actors/http/http_proxy_ssl.h b/library/cpp/actors/http/http_proxy_ssl.h
index ffce12997f7..9953430b1ce 100644
--- a/library/cpp/actors/http/http_proxy_ssl.h
+++ b/library/cpp/actors/http/http_proxy_ssl.h
@@ -39,6 +39,8 @@ struct TSslHelpers {
if (ctx) {
SSL_CTX_set_options(ctx.Get(), SSL_OP_NO_SSLv2);
SSL_CTX_set_options(ctx.Get(), SSL_OP_NO_SSLv3);
+ SSL_CTX_set_options(ctx.Get(), SSL_OP_NO_TLSv1);
+ SSL_CTX_set_options(ctx.Get(), SSL_OP_NO_TLSv1_1);
SSL_CTX_set_options(ctx.Get(), SSL_OP_MICROSOFT_SESS_ID_BUG);
SSL_CTX_set_options(ctx.Get(), SSL_OP_NETSCAPE_CHALLENGE_BUG);
}