Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
1.12.9, 1.13.8, 1.14.4, 1.15.0, 1.16.0
Description
If ssl-protocols is listed with a older protocol version ahead of a newer the SSLContext used will support at most that weaker protocol.
For example ssl-protocols=TLSV1.2,TLSv1.3,TLSv1.1 will use the TLSv1.2 SSLContext, which will not support, and silently ignore, the TLSv1.3 configuration. The effective enabled protocols list will be TLSV1.2,TLSv1.1.
Attachments
Issue Links
- links to