diff options
author | Simon MacMullen <simon@rabbitmq.com> | 2014-10-20 12:55:01 +0100 |
---|---|---|
committer | Simon MacMullen <simon@rabbitmq.com> | 2014-10-20 12:55:01 +0100 |
commit | b7bf54ead607f72ee4bdbf2ef45231b441788f13 (patch) | |
tree | 8fc9a31db6f31511f42508e22678b5588acf0af8 /ebin | |
parent | 08b0c2381dec16fb548ae6483ab447cd96068bfc (diff) | |
download | rabbitmq-server-b7bf54ead607f72ee4bdbf2ef45231b441788f13.tar.gz |
Remove bad SSL versions from the configured ones, don't hard code good versions (which differ across Erlang releases). Never permit use of bad SSL versions. Export a function to do this with.
Diffstat (limited to 'ebin')
-rw-r--r-- | ebin/rabbit_app.in | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/ebin/rabbit_app.in b/ebin/rabbit_app.in index baebd4d8..888e4dba 100644 --- a/ebin/rabbit_app.in +++ b/ebin/rabbit_app.in @@ -16,8 +16,7 @@ {mod, {rabbit, []}}, {env, [{tcp_listeners, [5672]}, {ssl_listeners, []}, - %% Disables SSLv3 to mitigate the POODLE attack - {ssl_options, [{versions, ['tlsv1.2', 'tlsv1.1', tlsv1]}]}, + {ssl_options, []}, {vm_memory_high_watermark, 0.4}, {vm_memory_high_watermark_paging_ratio, 0.5}, {disk_free_limit, 50000000}, %% 50MB |