From 0a6ceabb9baa4f0058f4403b392b8fda845a5d5a Mon Sep 17 00:00:00 2001 From: spacetourist Date: Sat, 20 May 2017 13:31:25 +0100 Subject: Allow configurable HTTPS SSL/TLS version(#4451) --- conf/app.ini | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'conf/app.ini') diff --git a/conf/app.ini b/conf/app.ini index 2927c2aa..e9bbf484 100644 --- a/conf/app.ini +++ b/conf/app.ini @@ -56,6 +56,9 @@ DISABLE_ROUTER_LOG = false ; $ openssl pkcs12 -in cert.pfx -out key.pem -nocerts -nodes CERT_FILE = custom/https/cert.pem KEY_FILE = custom/https/key.pem +; Allowed TLS version values: SSL30, TLS10, TLS11, TLS12 +TLS_MIN_VERSION = TLS10 + ; Upper level of template and static file path ; default is the path where Gogs is executed STATIC_ROOT_PATH = @@ -148,7 +151,7 @@ ANGLED_QUOTES = true [http] ; Value for Access-Control-Allow-Origin header, default is not to present -ACCESS_CONTROL_ALLOW_ORIGIN = +ACCESS_CONTROL_ALLOW_ORIGIN = ; Define allowed algorithms and their minimum key length (use -1 to disable a type) [ssh.minimum_key_sizes] @@ -346,7 +349,7 @@ MAX_DAYS = 7 ; leave empty to inherit LEVEL = ; Webhook URL -URL = +URL = [log.xorm] ; Enable file rotation -- cgit v1.2.3