github/distribution
1
0
Fork 0
mirror of https://github.com/distribution/distribution.git synced 2025-06-29 08:48:06 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #8588 from dqminh/remove-sslv3

Browse Source 
remove sslv3 from server's TLS supported versions
This commit is contained in:
Tibor Vass 2014-10-17 12:05:48 -04:00
commit 4c89bdaba2
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/registry.go
View File

@ -36,7 +36,11 @@ const (
) )
func newClient(jar http.CookieJar, roots *x509.CertPool, cert *tls.Certificate, timeout TimeoutType) *http.Client { func newClient(jar http.CookieJar, roots *x509.CertPool, cert *tls.Certificate, timeout TimeoutType) *http.Client {
tlsConfig := tls.Config{RootCAs: roots} tlsConfig := tls.Config{
RootCAs: roots,
// Avoid fallback to SSL protocols < TLS1.0
MinVersion: tls.VersionTLS10,
}
if cert != nil { if cert != nil {
tlsConfig.Certificates = append(tlsConfig.Certificates, *cert) tlsConfig.Certificates = append(tlsConfig.Certificates, *cert)