prosody-modules
5073bbd86970
mod_warn_legacy_tls/README.markdown

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Comparison

mod_warn_legacy_tls/README.markdown @ 3728:5073bbd86970

mod_warn_legacy_tls: Add a README
author Kim Alvefur <zash@zash.se>
date Sun, 03 Nov 2019 13:14:26 +0100
comparison
equal deleted inserted replaced
3727:36023eb3254e 3728:5073bbd86970
1 TLS 1.0 and TLS 1.1 are about to be obsolete. This module warns clients
2 if they are using those versions, to prepare for disabling them.
3
4 # Configuration
5
6 ``` {.lua}
7 modules_enabled = {
8 -- other modules etc
9 "warn_legacy_tls";
10 }
11
12 -- This is the default, you can leave it out if you don't wish to
13 -- customise or translate the message sent.
14 -- '%s' will be replaced with the TLS version in use.
15 legacy_tls_warning = [[
16 Your connection is encrypted using the %s protocol, which has been demonstrated to be insecure and will be disabled soon. Please upgrade your client.
17 ]]
18 ```
19
20 ## Options
21
22 `legacy_tls_warning`
23 : A string. The text of the message sent to clients that use outdated
24 TLS versions. Default as in the above example.
25
26 `legacy_tls_versions`
27 : Set of TLS versions, defaults to
28 `{ "SSLv3", "TLSv1", "TLSv1.1" }`{.lua}, i.e. TLS \< 1.2.