diff options
| author | Lee Clagett <code@leeclagett.com> | 2019-03-13 20:01:14 -0400 |
|---|---|---|
| committer | Lee Clagett <code@leeclagett.com> | 2019-04-06 23:47:07 -0400 |
| commit | 1f5ed328aa3b0501bd85774dc960c17a73d79db3 (patch) | |
| tree | 2012781c62caf2e6211d8bc7efb009c98fe4791d /tests/data/account-002bee2f8e16f5de4db0d3b8ce9227c8c0b7f9688348b028e022cb43f210968b40a69cdc8531fd4a2e7c9e144eec48bb477733d70ce5f9b85338a07cb10b849ad8fb | |
| parent | Do not require client certificate unless server has some whitelisted. (diff) | |
| download | monero-1f5ed328aa3b0501bd85774dc960c17a73d79db3.tar.xz | |
Change default SSL to "enabled" if user specifies fingerprint/certificate
Currently if a user specifies a ca file or fingerprint to verify peer,
the default behavior is SSL autodetect which allows for mitm downgrade
attacks. It should be investigated whether a manual override should be
allowed - the configuration is likely always invalid.
Diffstat (limited to 'tests/data/account-002bee2f8e16f5de4db0d3b8ce9227c8c0b7f9688348b028e022cb43f210968b40a69cdc8531fd4a2e7c9e144eec48bb477733d70ce5f9b85338a07cb10b849ad8fb')
0 files changed, 0 insertions, 0 deletions