haproxy/src
William Lallemand 2f44a59c7f MEDIUM: ssl: use TLSv1.2 as the minimum default on bind lines
Since HAProxy 1.8, the TLS default minimum version was set to TLSv1.0 to
avoid using the deprecated SSLv3.0. Since then, the standard changed and
the recommended TLS version is now TLSv1.2.

This patch changes the minimum default version to TLSv1.2 on bind lines.
If you need to use prior TLS version, this is still possible by
using the ssl-min-ver keyword.
2020-05-29 09:05:45 +02:00
..
51d.c BUG/MINOR: 51d: Fix HTX message prefetch 2020-05-05 11:53:43 +02:00
acl.c CLEANUP: acl: remove unused assignment 2020-05-18 09:21:27 +02:00
action.c
activity.c
applet.c
arg.c BUG/MINOR: arg: don't reject missing optional args 2020-02-28 16:41:29 +01:00
auth.c
backend.c BUG/MEDIUM: backend: set the connection owner to the session when using alpn. 2020-05-27 01:34:33 +02:00
base64.c
buffer.c BUG/MINOR: buffers: MT_LIST_DEL_SAFE() expects the temporary pointer. 2020-03-10 17:44:40 +01:00
cache.c BUG/MINOR: cache: Don't needlessly test "cache" keyword in parse_cache_flt() 2020-05-18 17:47:18 +02:00
calltrace.c
cfgparse-global.c Revert "MEDIUM: sink: add global statement to create a new ring (sink buffer)" 2020-05-20 12:06:16 +02:00
cfgparse-listen.c MAJOR: checks: Implement HTTP check using tcp-check rules 2020-04-27 09:39:38 +02:00
cfgparse-ssl.c MINOR: ssl: split config and runtime variable for ssl-{min,max}-ver 2020-05-20 16:49:02 +02:00
cfgparse.c BUG/MINOR: nameservers: fix error handling in parsing of resolv.conf 2020-05-28 18:12:22 +02:00
channel.c
checks.c BUG/MEDIUM: checks: Don't add a tcpcheck ruleset twice in the shared tree 2020-05-29 08:20:17 +02:00
chunk.c CLEANUP: assorted typo fixes in the code and comments 2020-05-11 10:11:29 +02:00
cli.c MINOR: applet: adopt the wait list entry from the CLI 2020-05-19 19:37:12 +02:00
compression.c
connection.c BUG/MEDIUM: connection: Ignore PP2 unique ID for stream-less connections 2020-05-26 17:36:01 +02:00
da.c BUG/MINOR: da: Fix HTX message prefetch 2020-05-05 11:50:14 +02:00
debug.c BUG/MINOR: debug: properly use long long instead of long for the thread ID 2020-05-01 12:26:03 +02:00
dict.c
dns.c BUG/MEDIUM: dns: Consider the fact that dns answers are case-insensitive 2020-04-01 18:35:05 +02:00
ev_epoll.c CLEANUP: remove support for USE_MY_EPOLL 2020-03-10 07:08:10 +01:00
ev_evports.c CLEANUP: assorted typo fixes in the code and comments 2020-03-31 17:09:35 +02:00
ev_kqueue.c
ev_poll.c BUG/MINOR: pollers: remove uneeded free in global init 2020-05-13 11:45:37 +02:00
ev_select.c BUILD: select: only declare existing local labels to appease clang 2020-05-13 16:25:26 +02:00
fcgi-app.c CLEANUP: Use isttest() and istfree() 2020-03-05 19:52:07 +01:00
fcgi.c
fd.c CLEANUP: src/fd.c: mask setsockopt with DISGUISE 2020-04-02 15:10:17 +02:00
filters.c MINOR: config: Don't dump keywords if argument is NULL 2020-05-18 18:30:06 +02:00
flt_http_comp.c MINOR: compression/filters: Initialize the comp filter when stream is created 2020-03-06 15:36:04 +01:00
flt_spoe.c CLEANUP: assorted typo fixes in the code and comments 2020-04-02 16:25:45 +02:00
flt_trace.c BUG/MEDIUM: random: implement a thread-safe and process-safe PRNG 2020-03-08 10:09:02 +01:00
freq_ctr.c
frontend.c MINOR: use DISGUISE() everywhere we deliberately want to ignore a result 2020-03-14 11:04:49 +01:00
h1_htx.c
h1.c BUG/MEDIUM: h1: Don't compare host and authority if only h1 headers are parsed 2020-05-04 09:27:01 +02:00
h2.c CLEANUP: assorted typo fixes in the code and comments 2020-04-02 16:25:45 +02:00
haproxy.c MINOR: soft-stop: let the first stopper only signal other threads 2020-05-13 14:30:25 +02:00
hash.c
hathreads.c
hlua_fcn.c BUG/MINOR: lua: Add missing string length for lua sticktable lookup 2020-05-28 15:15:52 +02:00
hlua.c MEDIUM: lua: Add ifexist parameter to set_var 2020-05-25 08:12:35 +02:00
hpack-dec.c CLEANUP: Use isttest() and istfree() 2020-03-05 19:52:07 +01:00
hpack-enc.c
hpack-huff.c
hpack-tbl.c MEDIUM: hpack: use a pool for the hpack table 2020-05-19 11:40:39 +02:00
http_acl.c
http_act.c MINOR: http-rules: Use an action function to eval http-request auth rules 2020-05-28 15:07:20 +02:00
http_ana.c MINOR: http-rules: Use an action function to eval http-request auth rules 2020-05-28 15:07:20 +02:00
http_conv.c BUG/MEDIUM: capture: capture-req/capture-res converters crash without a stream 2020-04-29 11:29:17 +02:00
http_fetch.c MINOR: checks/sample: Remove unnecessary tests on the sample session 2020-05-06 12:44:46 +02:00
http_htx.c CLEANUP: http: Remove unused HTTP message templates 2020-05-28 15:07:20 +02:00
http_rules.c
http.c CLEANUP: http: Remove unused HTTP message templates 2020-05-28 15:07:20 +02:00
htx.c MINOR: htx: Use htx_find_offset() to truncate an HTX message 2020-03-06 14:12:59 +01:00
lb_chash.c
lb_fas.c
lb_fwlc.c
lb_fwrr.c
lb_map.c CLEANUP: assorted typo fixes in the code and comments 2020-04-02 16:25:45 +02:00
listener.c MINOR: config: Don't dump keywords if argument is NULL 2020-05-18 18:30:06 +02:00
log.c BUG/MEDIUM: logs: fix trailing zeros on log message. 2020-05-28 15:30:51 +02:00
lru.c
mailers.c
map.c
memory.c MINOR: pools: compute an estimate of each pool's average needed objects 2020-05-27 08:32:42 +02:00
mux_fcgi.c BUG/MAJOR: mux-fcgi: Stop sending loop if FCGI stream is blocked for any reason 2020-05-19 16:00:55 +02:00
mux_h1.c CLEANUP: assorted typo fixes in the code and comments 2020-05-11 10:11:29 +02:00
mux_h2.c MEDIUM: hpack: use a pool for the hpack table 2020-05-19 11:40:39 +02:00
mux_pt.c MINOR: mux_pt: Don't try to remove the connection from the idle list. 2020-03-17 13:38:18 +01:00
mworker-prog.c
mworker.c MINOR: mworker: replace ha_alert by ha_warning when exiting successfuly 2020-05-06 17:27:03 +02:00
namespace.c
pattern.c BUG/MINOR: pattern: Do not pass len = 0 to calloc() 2020-03-18 05:17:28 +01:00
payload.c MINOR: checks/sample: Remove unnecessary tests on the sample session 2020-05-06 12:44:46 +02:00
peers.c CLEANUP: assorted typo fixes in the code and comments 2020-05-11 10:11:29 +02:00
pipe.c
proto_sockpair.c MINOR: tcp/uxst/sockpair: only ask for I/O when really waiting for a connect() 2020-03-04 19:29:12 +01:00
proto_tcp.c BUG/MINOR: rules: Increment be_counters if backend is assigned for a silent-drop 2020-03-06 15:36:04 +01:00
proto_udp.c
proto_uxst.c MINOR: tcp/uxst/sockpair: only ask for I/O when really waiting for a connect() 2020-03-04 19:29:12 +01:00
protocol.c
proxy.c MEDIUM: checks: Add a list of vars to set before executing a tpc-check ruleset 2020-04-27 09:39:37 +02:00
queue.c
raw_sock.c CLEANUP: assorted typo fixes in the code and comments 2020-03-31 17:09:35 +02:00
regex.c
ring.c MINOR: ring: make the applet code not depend on the CLI 2020-05-19 19:37:12 +02:00
sample.c MINOR: http-htx/proxy: Add http-error directive using http return syntax 2020-05-20 18:27:14 +02:00
server.c MINOR: config: Don't dump keywords if argument is NULL 2020-05-18 18:30:06 +02:00
session.c MAJOR: checks: Implement HTTP check using tcp-check rules 2020-04-27 09:39:38 +02:00
sha1.c
shctx.c
signal.c BUG/MEDIUM: wdt: Don't ignore WDTSIG and DEBUGSIG in __signal_process_queue(). 2020-03-18 13:10:05 +01:00
sink.c MEDIUM: ring: new section ring to declare custom ring buffers. 2020-05-26 08:03:15 +02:00
ssl_ckch.c REORG: ssl: move utility functions to src/ssl_utils.c 2020-05-15 14:11:54 +02:00
ssl_crtlist.c MINOR: ssl: split config and runtime variable for ssl-{min,max}-ver 2020-05-20 16:49:02 +02:00
ssl_sample.c REORG: ssl: move utility functions to src/ssl_utils.c 2020-05-15 14:11:54 +02:00
ssl_sock.c MEDIUM: ssl: use TLSv1.2 as the minimum default on bind lines 2020-05-29 09:05:45 +02:00
ssl_utils.c REORG: ssl: move utility functions to src/ssl_utils.c 2020-05-15 14:11:54 +02:00
standard.c CLEANUP: assorted typo fixes in the code and comments 2020-05-11 10:11:29 +02:00
stats.c MEDIUM: stats: Enable more accurate moving average calculation for stats 2020-05-16 22:40:06 +02:00
stick_table.c CLEANUP: assorted typo fixes in the code and comments 2020-04-16 10:04:36 +02:00
stream_interface.c BUG/MINOR: connection: Always get the stream when available to send PP2 line 2020-05-26 17:39:39 +02:00
stream.c MEDIUM: stats: Enable more accurate moving average calculation for stats 2020-05-16 22:40:06 +02:00
task.c CLEANUP: assorted typo fixes in the code and comments 2020-04-17 09:37:36 +02:00
tcp_rules.c
time.c
trace.c MEDIUM: sink: build header in sink_write for log formats 2020-05-19 11:04:11 +02:00
uri_auth.c
vars.c MINOR: vars: Make vars_(un|)set_by_name(_ifexist|) return a success value 2020-05-25 08:12:27 +02:00
version.c
wdt.c MINOR: wdt: Move the definitions of WDTSIG and DEBUGSIG into types/signal.h. 2020-03-18 13:07:19 +01:00
wurfl.c CLEANUP: assorted typo fixes in the code and comments 2020-05-11 10:11:29 +02:00
xprt_handshake.c BUG/MINOR: connection/debug: do not enforce !event_type on subscribe() anymore 2020-03-05 07:46:33 +01:00
xxhash.c