pveproxy: also support newer tls versions

f6bc4a73 · Dietmar Maurer · bc628e80 · f6bc4a73
Commit f6bc4a73 authored Dec 02, 2014 by Dietmar Maurer
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

pveproxy bin/pveproxy +2 -1

No files found.
--- a/bin/pveproxy
+++ b/bin/pveproxy
@@ -107,7 +107,8 @@ eval {
 	ssl => {
 	    # Note: older versions are considered insecure, for example
 	    # search for "Poodle"-Attac
-	    method => "tlsv1",
+	    sslv2 => 0,
+	    sslv3 => 0,	    
 	    cipher_list => $proxyconf->{CIPHERS} || 'HIGH:MEDIUM:!aNULL:!MD5',
 	    key_file => '/etc/pve/local/pve-ssl.key',
 	    cert_file => '/etc/pve/local/pve-ssl.pem',