Comparison

mod_warn_legacy_tls/README.md @ 6261:8c9eb4b6d02f draft default tip

Merge updates
author Trần H. Trung <xmpp:trần.h.trung@trung.fun>
date Sun, 18 May 2025 20:52:00 +0700
parent 6260:b3489b046782
comparison
equal deleted inserted replaced
6245:ea58d2893afb 6261:8c9eb4b6d02f
1 --- 1 ---
2 labels: 2 labels:
3 - Stage-Alpha 3 - Stage-Alpha
4 summary: Warn users of obsolete TLS Versions in clients 4 summary: Warn users of obsolete TLS Versions in clients
5 --- 5 ---
6
7 6
8 TLS 1.0 and TLS 1.1 are obsolete. This module warns clients if they are using those versions, to prepare for disabling them. (If you use the default prosody config, this module will be unnessesary in its default setting, since these protocols are not allowed anymore by any supported prosody version.) 7 TLS 1.0 and TLS 1.1 are obsolete. This module warns clients if they are using those versions, to prepare for disabling them. (If you use the default prosody config, this module will be unnessesary in its default setting, since these protocols are not allowed anymore by any supported prosody version.)
9 8
10 This module can be used to warn from TLS1.2 if you want to switch to modern security in the near future. 9 This module can be used to warn from TLS1.2 if you want to switch to modern security in the near future.
11 10
12 # Configuration 11 # Configuration
13 12
14 ``` {.lua} 13 ``` lua
15 modules_enabled = { 14 modules_enabled = {
16 -- other modules etc 15 -- other modules etc
17 "warn_legacy_tls"; 16 "warn_legacy_tls";
18 } 17 }
19 18
39 : Set of TLS versions, defaults to 38 : Set of TLS versions, defaults to
40 `{ "SSLv3", "TLSv1", "TLSv1.1" }`{.lua}, i.e. TLS \< 1.2. 39 `{ "SSLv3", "TLSv1", "TLSv1.1" }`{.lua}, i.e. TLS \< 1.2.
41 40
42 # Compatibility 41 # Compatibility
43 42
44 Prosody-Version Status 43 Prosody-Version Status
45 --------------- --------------------- 44 ----------------- ----------------------
46 trunk Works as of 24-12-16 45 trunk Works as of 25-05-25
47 0.12 Works 46 13 Works
47 0.12 Works