summaryrefslogtreecommitdiff
path: root/src/node_options.cc
diff options
context:
space:
mode:
authorBen Noordhuis <info@bnoordhuis.nl>2018-10-22 11:40:28 +0200
committerAnna Henningsen <anna@addaleax.net>2018-11-13 16:05:51 +0100
commit60eca6a5d4fb5d70c4affceb1fbe78f1c1db8354 (patch)
tree9578cd5afb40f0d6babadf472f6ecce96e869500 /src/node_options.cc
parentfcd7a7242890b30c3c143255234bdfe1855999b6 (diff)
downloadandroid-node-v8-60eca6a5d4fb5d70c4affceb1fbe78f1c1db8354.tar.gz
android-node-v8-60eca6a5d4fb5d70c4affceb1fbe78f1c1db8354.tar.bz2
android-node-v8-60eca6a5d4fb5d70c4affceb1fbe78f1c1db8354.zip
tls: disable TLS v1.0 and v1.1 by default
Refs: https://blog.mozilla.org/security/2018/10/15/removing-old-versions-of-tls/ PR-URL: https://github.com/nodejs/node/pull/23814 Reviewed-By: Refael Ackermann <refack@gmail.com> Reviewed-By: Sam Roberts <vieuxtech@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rod Vagg <rod@vagg.org> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Diffstat (limited to 'src/node_options.cc')
-rw-r--r--src/node_options.cc11
1 files changed, 11 insertions, 0 deletions
diff --git a/src/node_options.cc b/src/node_options.cc
index 98beb9f4c6..5dc6779bc4 100644
--- a/src/node_options.cc
+++ b/src/node_options.cc
@@ -189,6 +189,17 @@ EnvironmentOptionsParser::EnvironmentOptionsParser() {
AddOption("--napi-modules", "", NoOp{}, kAllowedInEnvironment);
+#if HAVE_OPENSSL
+ AddOption("--tls-v1.0",
+ "enable TLSv1.0",
+ &EnvironmentOptions::tls_v1_0,
+ kAllowedInEnvironment);
+ AddOption("--tls-v1.1",
+ "enable TLSv1.1",
+ &EnvironmentOptions::tls_v1_1,
+ kAllowedInEnvironment);
+#endif
+
Insert(&DebugOptionsParser::instance,
&EnvironmentOptions::get_debug_options);
}