[dnsdist] minTLSVersion Testing

[Brian Sullivan]

Hi All,

Works great! Thanks for putting this in 1.4!

There is one minor issue ... the documentation is incorrect.

minTLSVersion: str - Minimum version of the TLS protocol to support.
Possible values are ‘tls-1.0’, ‘tls-1.1’, ‘tls-1.2’ and ‘tls-1.3’.

The strings should not have the dash in them.

  static const std::map<LibsslTLSVersion, std::string> versions = {
    { LibsslTLSVersion::TLS10, "tls1.0" },
    { LibsslTLSVersion::TLS11, "tls1.1" },
    { LibsslTLSVersion::TLS12, "tls1.2" },
    { LibsslTLSVersion::TLS13, "tls1.3" }
  };

Regards,
brian
-- 



Brian M. Sullivan
Senior Staff Security Intelligence Engineer
bsullivan at lookout.com |  www.lookout.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20190904/609d86c2/attachment.htm>