[stunnel-users] Allowing only TLS 1.2 and 1.3

[Jorge Bastos]

Howdy, 

; Use sslVersionMax or sslVersionMin option instead of disabling
specific TLS protocol versions when compiled
;           with OpenSSL 1.1.0 or later.

sslVersionMin = TLSv1.2 

Produced no efect, openssl is 1.1.1g 

any idea? 

On 2020-07-30 0:54, Thomas Eifert wrote:

> P.S.
> 
> There's also an sslVersionMax  if you feel you need it.
> 
> On 7/29/2020 5:20 PM, Jorge Bastos wrote: 
> 
>> Howdy, 
>> 
>> I've been trying to configure stunnel to provide only TLS 1.2 and 1.3, but no sucess.
>> I have the configuration bellow, what could i be doing wrong? 
>> 
>> Thanks in advanced, 
>> 
>> sslVersion = all
>> options    = NO_SSLv2
>> options    = NO_SSLv3
>> options    = NO_TLSv1
>> options    = NO_TLSv1.1 
>> 
>> _______________________________________________
>> stunnel-users mailing list
>> stunnel-users at stunnel.org
>> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
> 
> -- 
> Attention: This message and all attachments are private and may contain information that is confidential and privileged. If you received this message in error, please notify the sender by reply email and delete the message immediately.
> 
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at stunnel.org
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20200730/b60587cf/attachment.htm>