codehaus


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug 62939] New: SSLProtocol and TLSv1.3


https://bz.apache.org/bugzilla/show_bug.cgi?id=62939

            Bug ID: 62939
           Summary: SSLProtocol and TLSv1.3
           Product: Apache httpd-2
           Version: 2.4.37
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@xxxxxxxxxxxxxxxx
          Reporter: JBlond@xxxxxxxxx
  Target Milestone: ---

My global settings I have 

SSLProtocol -all +TLSv1.2 +TLSv1.3

In one vhost I want only TLS 1.3. So in that vhost I added 

SSLProtocol -all +TLSv1.3 

However that setting does not work. On that vhost even a client that can not do
TLSv1.3 can connect.

Apache: 2.4.37
OpenSSL: 1.1.1a
nghttp2: 1.32.0

Tried with winnt mpm and event mpm

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: bugs-help@xxxxxxxxxxxxxxxx