Project

General

Profile

Todo #9607

Update web server TLS versions for 2.5.0

Added by Jim Pingle 4 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Web Interface
Target version:
Start date:
06/28/2019
Due date:
% Done:

100%

Estimated time:

Description

Now that it's 2019 and we have OpenSSL 1.1.x we can play a bit of musical TLS versions for nginx.

Captive Portal currently has: "TLSv1 TLSv1.1 TLSv1.2" with v1 only remaining for compatibility.
The GUI currently uses: "TLSv1.1 TLSv1.2"

In both cases we can remove the lowest item and add TLSv1.3, to get:

CP: TLSv1.1 TLSv1.2 TLSv1.3
GUI: TLSv1.2 TLSv1.3

Testing locally this works fine for me, so it's good enough to go into 2.5.0 for further testing.

Associated revisions

Revision aa618753 (diff)
Added by Jim Pingle 4 months ago

Update TLS versions used by nginx. Implements #9607

Revision bb1692e4 (diff)
Added by Jim Pingle 4 months ago

Update comment. Issue #9607

History

#1 Updated by Jim Pingle 4 months ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

#2 Updated by Jim Pingle about 2 months ago

  • Status changed from Feedback to Resolved

This has been working fine, no reports of breakage that I've seen either.

Also available in: Atom PDF