Merge pull request #301 from gstrauss/stunnel-sslVersionMin

stunnel: always set sslVersionMin for stunnel 5.50+
mozilla · Dec 8, 2024 · 2dc04c1 · 2dc04c1
2 parents f3a5f6c + 53bbf6c
commit 2dc04c1
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/src/js/helpers/stunnel.js b/src/js/helpers/stunnel.js
@@ -7,13 +7,10 @@ export default (form, output) => {
       '\n';
 
  if (minver("5.50", form.serverVersion)) {
-  if (output.protocols[0] === 'TLSv1.2') {
     conf +=
-      'sslVersionMin = TLSv1.2\n';
-  }
-  else if (output.protocols[0] === 'TLSv1.3') {
+      'sslVersionMin = '+output.protocols[0]+'\n';
+  if (output.protocols[0] === 'TLSv1.3') {
     conf +=
-      'sslVersionMin = TLSv1.3\n'+
       'ciphersuites = '+output.cipherSuites.join(':')+'\n';
   }
  }