summaryrefslogtreecommitdiff
path: root/ebin
diff options
context:
space:
mode:
authorSimon MacMullen <simon@rabbitmq.com>2014-10-20 12:55:01 +0100
committerSimon MacMullen <simon@rabbitmq.com>2014-10-20 12:55:01 +0100
commit8f2c2d08abbe60a6ce665c78aff2d5f5008e9efd (patch)
tree8fc9a31db6f31511f42508e22678b5588acf0af8 /ebin
parent1d0be28cdaaf42994fbf88ea88ffb347abe1b150 (diff)
downloadrabbitmq-server-git-8f2c2d08abbe60a6ce665c78aff2d5f5008e9efd.tar.gz
Remove bad SSL versions from the configured ones, don't hard code good versions (which differ across Erlang releases). Never permit use of bad SSL versions. Export a function to do this with.
Diffstat (limited to 'ebin')
-rw-r--r--ebin/rabbit_app.in3
1 files changed, 1 insertions, 2 deletions
diff --git a/ebin/rabbit_app.in b/ebin/rabbit_app.in
index baebd4d884..888e4dbabf 100644
--- a/ebin/rabbit_app.in
+++ b/ebin/rabbit_app.in
@@ -16,8 +16,7 @@
{mod, {rabbit, []}},
{env, [{tcp_listeners, [5672]},
{ssl_listeners, []},
- %% Disables SSLv3 to mitigate the POODLE attack
- {ssl_options, [{versions, ['tlsv1.2', 'tlsv1.1', tlsv1]}]},
+ {ssl_options, []},
{vm_memory_high_watermark, 0.4},
{vm_memory_high_watermark_paging_ratio, 0.5},
{disk_free_limit, 50000000}, %% 50MB