RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-04-23 15:35:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

DOC: ssl: Use consistent naming for TLS protocols

Browse Source 
In most cases, "TLSv1.x" naming is used across and documentation, lazy
people tend to grep too much and may not find what they are looking for.

Fixing people is hard.
This commit is contained in:
Bertrand Jacquin 2018-08-14 00:56:13 +01:00 committed by Willy Tarreau
parent fabb24f92c
commit a25282bb39
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/configuration.txt
View File

@ -10541,7 +10541,7 @@ accept-proxy
setting of which client is allowed to use the protocol.
allow-0rtt
Allow receiving early data when using TLS 1.3. This is disabled by default,
Allow receiving early data when using TLSv1.3. This is disabled by default,
due to security considerations.
alpn <protocols>

4
src/ssl_sock.c
View File

@ -1996,7 +1996,7 @@ static void ctx_set_TLSv12_func(SSL_CTX *ctx, set_context_func c) {
: SSL_CTX_set_ssl_version(ctx, TLSv1_2_client_method());
#endif
}
/* TLS 1.2 is the last supported version in this context. */
/* TLSv1.2 is the last supported version in this context. */
static void ctx_set_TLSv13_func(SSL_CTX *ctx, set_context_func c) {}
/* Unusable in this context. */
static void ssl_set_SSLv3_func(SSL *ssl, set_context_func c) {}
@ -2197,7 +2197,7 @@ static int ssl_sock_switchctx_cbk(SSL *ssl, int *al, void *arg)
break;
}
} else {
/* without TLSEXT_TYPE_signature_algorithms extension (< TLS 1.2) */
/* without TLSEXT_TYPE_signature_algorithms extension (< TLSv1.2) */
has_rsa = 1;
}
if (has_ecdsa_sig) { /* in very rare case: has ecdsa sign but not a ECDSA cipher */