diff options
| author | Sara Golemon <sara.golemon@mongodb.com> | 2018-03-28 12:59:44 -0400 |
|---|---|---|
| committer | Sara Golemon <sara.golemon@mongodb.com> | 2018-04-03 14:19:22 -0400 |
| commit | 6de2b07c2285b26c6f724ca684eb9dd7fde117dc (patch) | |
| tree | d21dc3c48ba81ee8ac03002c09570215a1f8db8e /src/mongo/util/net/ssl_manager_windows.cpp | |
| parent | 14cff11a5b107a607e586a08fa18a06352387db8 (diff) | |
| download | mongo-6de2b07c2285b26c6f724ca684eb9dd7fde117dc.tar.gz | |
SERVER-32981 Disable TLS 1.0 by default
Diffstat (limited to 'src/mongo/util/net/ssl_manager_windows.cpp')
| -rw-r--r-- | src/mongo/util/net/ssl_manager_windows.cpp | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/mongo/util/net/ssl_manager_windows.cpp b/src/mongo/util/net/ssl_manager_windows.cpp index 3e91df52fe9..51e85111828 100644 --- a/src/mongo/util/net/ssl_manager_windows.cpp +++ b/src/mongo/util/net/ssl_manager_windows.cpp @@ -1267,6 +1267,10 @@ Status SSLManagerWindows::initSSLContext(SCHANNEL_CRED* cred, } cred->grbitEnabledProtocols = supportedProtocols; + if (supportedProtocols == 0) { + return {ErrorCodes::InvalidSSLConfiguration, + "All supported TLS protocols have been disabled."}; + } if (!params.sslCipherConfig.empty()) { warning() |