[Libreoffice-bugs] [Bug 141454] New: loolwsd: Allow to disable specific TLS protocol versions

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=141454

            Bug ID: 141454
           Summary: loolwsd: Allow to disable specific TLS protocol
                    versions
           Product: LibreOffice Online
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: lool-bugreport at trash-mail.com

In /etc/loolwsd/loolwsd.xml it is currently possible to configure the OpenSSL
ciphers via <cipher_list></cipher_list>.

With the recent deprecation of the TLS 1.0 and 1.1 protocol versions the
possibility to disable both protocols is currently missing (either not
implemented or maybe just not documented?).

Please add the possibility in the loolwsd.xml to disable specific TLS protocols
similar to e.g. Apache:
https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslprotocol

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20210402/6ef1a26e/attachment.htm>