From 503e87bd2b86e1a69895089d5aa7a712fbe46c40 Mon Sep 17 00:00:00 2001 From: Michael Zanetti Date: Wed, 5 Jun 2019 19:58:07 +0200 Subject: [PATCH] Bump minimum required TLS version to 1.2 --- libnymea-core/servermanager.cpp | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/libnymea-core/servermanager.cpp b/libnymea-core/servermanager.cpp index ccc0970b..b70594ff 100644 --- a/libnymea-core/servermanager.cpp +++ b/libnymea-core/servermanager.cpp @@ -92,9 +92,8 @@ ServerManager::ServerManager(Platform *platform, NymeaConfiguration *configurati } } if (certsLoaded) { - // Enable this when we can - // Debian jessie doesn't have better options yet and the client apps currently only support up to TLS 1.1 -// m_sslConfiguration.setProtocol(QSsl::TlsV1_1OrLater); + // Update this to 1.3 when minimum required Qt is 5.12 (and known client apps can deal with it) + m_sslConfiguration.setProtocol(QSsl::TlsV1_2OrLater); m_sslConfiguration.setPrivateKey(m_certificateKey); m_sslConfiguration.setLocalCertificate(m_certificate); }