corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 1076983 - Disabling SSL 3.0 with pref

Browse Source
This commit is contained in:
Martin Thomson
2014-10-14 17:17:35 -07:00
parent 9bdaf3a1d7
commit 19bbaa2da4
2 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
netwerk/base/public/security-prefs.js
View File

@@ -2,7 +2,7 @@
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
pref("security.tls.version.min", 0);
pref("security.tls.version.min", 1);
pref("security.tls.version.max", 3);
pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", false);

7
security/manager/ssl/src/nsNSSComponent.cpp
View File

@@ -829,14 +829,13 @@ void nsNSSComponent::setValidationOptions(bool isInitialSetting,
mDefaultCertVerifier = new SharedCertVerifier(odc, osc, ogc, pinningMode);
}
// Enable the TLS versions given in the prefs, defaulting to SSL 3.0 (min
// version) and TLS 1.2 (max version) when the prefs aren't set or set to
// invalid values.
// Enable the TLS versions given in the prefs, defaulting to TLS 1.0 (min) and
// TLS 1.2 (max) when the prefs aren't set or set to invalid values.
nsresult
nsNSSComponent::setEnabledTLSVersions()
{
// keep these values in sync with security-prefs.js
static const int32_t PSM_DEFAULT_MIN_TLS_VERSION = 0;
static const int32_t PSM_DEFAULT_MIN_TLS_VERSION = 1;
static const int32_t PSM_DEFAULT_MAX_TLS_VERSION = 3;
int32_t minVersion = Preferences::GetInt("security.tls.version.min",