Remove TLS v1.0-v1.1 support, use v1.2 by default

bitshares · Jul 24, 2020 · ed411d2 · ed411d2
1 parent 3bc5a46
commit ed411d2
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/network/http/websocket.cpp b/src/network/http/websocket.cpp
@@ -424,6 +424,8 @@ namespace fc { namespace http {
                         ctx->set_options( boost::asio::ssl::context::default_workarounds |
                                           boost::asio::ssl::context::no_sslv2 |
                                           boost::asio::ssl::context::no_sslv3 |
+                                          boost::asio::ssl::context::no_tlsv1 |
+                                          boost::asio::ssl::context::no_tlsv1_1 |
                                           boost::asio::ssl::context::single_dh_use );
                         ctx->set_password_callback(
                               [ssl_password](std::size_t max_length, boost::asio::ssl::context::password_purpose){
@@ -582,11 +584,13 @@ namespace fc { namespace http {
 
                 _client.set_tls_init_handler( [this,ca_filename_copy](websocketpp::connection_hdl) {
                    context_ptr ctx = websocketpp::lib::make_shared<boost::asio::ssl::context>(
-                                           boost::asio::ssl::context::tlsv1);
+                                           boost::asio::ssl::context::tlsv12);
                    try {
                       ctx->set_options( boost::asio::ssl::context::default_workarounds |
                                         boost::asio::ssl::context::no_sslv2 |
                                         boost::asio::ssl::context::no_sslv3 |
+                                        boost::asio::ssl::context::no_tlsv1 |
+                                        boost::asio::ssl::context::no_tlsv1_1 |
                                         boost::asio::ssl::context::single_dh_use );
 
                       setup_peer_verify( ctx, ca_filename_copy );