summaryrefslogtreecommitdiff
path: root/ebin
diff options
context:
space:
mode:
authorSimon MacMullen <simon@rabbitmq.com>2014-10-20 12:55:01 +0100
committerSimon MacMullen <simon@rabbitmq.com>2014-10-20 12:55:01 +0100
commitb7bf54ead607f72ee4bdbf2ef45231b441788f13 (patch)
tree8fc9a31db6f31511f42508e22678b5588acf0af8 /ebin
parent08b0c2381dec16fb548ae6483ab447cd96068bfc (diff)
downloadrabbitmq-server-b7bf54ead607f72ee4bdbf2ef45231b441788f13.tar.gz
Remove bad SSL versions from the configured ones, don't hard code good versions (which differ across Erlang releases). Never permit use of bad SSL versions. Export a function to do this with.
Diffstat (limited to 'ebin')
-rw-r--r--ebin/rabbit_app.in3
1 files changed, 1 insertions, 2 deletions
diff --git a/ebin/rabbit_app.in b/ebin/rabbit_app.in
index baebd4d8..888e4dba 100644
--- a/ebin/rabbit_app.in
+++ b/ebin/rabbit_app.in
@@ -16,8 +16,7 @@
{mod, {rabbit, []}},
{env, [{tcp_listeners, [5672]},
{ssl_listeners, []},
- %% Disables SSLv3 to mitigate the POODLE attack
- {ssl_options, [{versions, ['tlsv1.2', 'tlsv1.1', tlsv1]}]},
+ {ssl_options, []},
{vm_memory_high_watermark, 0.4},
{vm_memory_high_watermark_paging_ratio, 0.5},
{disk_free_limit, 50000000}, %% 50MB