downgrade to tls12

This commit is contained in:
changx 2018-10-29 16:26:37 +08:00
parent e27601f648
commit 88e33cab7e

View File

@ -130,10 +130,9 @@ func (s *TLS) ListenAndServe(c net.Conn) {
tlsConfig = &stdtls.Config{ tlsConfig = &stdtls.Config{
Certificates: []stdtls.Certificate{cert}, Certificates: []stdtls.Certificate{cert},
MinVersion: stdtls.VersionTLS12, MinVersion: stdtls.VersionTLS10,
MaxVersion: stdtls.VersionTLS13, MaxVersion: stdtls.VersionTLS12,
SessionTicketKey: ticketKey, SessionTicketKey: ticketKey,
Accept0RTTData: true,
} }
} else { } else {
tlsConfig = nil tlsConfig = nil
@ -184,8 +183,8 @@ func (s *TLS) Dial(network, addr string) (net.Conn, error) {
ServerName: s.serverName, ServerName: s.serverName,
InsecureSkipVerify: s.skipVerify, InsecureSkipVerify: s.skipVerify,
ClientSessionCache: stdtls.NewLRUClientSessionCache(64), ClientSessionCache: stdtls.NewLRUClientSessionCache(64),
MinVersion: stdtls.VersionTLS12, MinVersion: stdtls.VersionTLS10,
MaxVersion: stdtls.VersionTLS13, MaxVersion: stdtls.VersionTLS12,
} }
c := stdtls.Client(cc, conf) c := stdtls.Client(cc, conf)