diff options
| author | Michael Brüning <michael.bruning@digia.com> | 2015-01-13 13:51:10 +0100 |
|---|---|---|
| committer | Michael Brüning <michael.bruning@theqtcompany.com> | 2015-01-13 14:55:33 +0100 |
| commit | f9c03801de86b5e9da2b915a9e490c2f2254fecf (patch) | |
| tree | b2f89ad845a0e348ce3a6430bc494f8abbb1d76f | |
| parent | caa6297dd5254b01276e6ff6aa19001ba3737ccc (diff) | |
<chromium> Force TLS1 as the minimum SSL version.v5.4.1
The previous minimum SSLv3 was vulnerable against the POODLE attack.
Task-number: QTBUG-43085
Change-Id: I00da7b30cfdc7900c2471ddad1afb7bed4e36bdc
Reviewed-by: Andras Becsi <andras.becsi@theqtcompany.com>
Reviewed-by: Pierre Rossi <pierre.rossi@theqtcompany.com>
| -rw-r--r-- | chromium/net/ssl/ssl_config.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chromium/net/ssl/ssl_config.cc b/chromium/net/ssl/ssl_config.cc index 02829918ed4..8de5fb65499 100644 --- a/chromium/net/ssl/ssl_config.cc +++ b/chromium/net/ssl/ssl_config.cc @@ -10,7 +10,7 @@ namespace net { -const uint16 kDefaultSSLVersionMin = SSL_PROTOCOL_VERSION_SSL3; +const uint16 kDefaultSSLVersionMin = SSL_PROTOCOL_VERSION_TLS1; const uint16 kDefaultSSLVersionMax = #if defined(USE_OPENSSL) |