tree 6c4aa7e29140ea42ac9639a8bff893809f368d77
parent 56192cc60b786f2c82925411d8b2ccd7d9f97d84
author William Lallemand <wlallemand@haproxy.com> 1590735273 +0200
committer William Lallemand <wlallemand@haproxy.org> 1590735945 +0200

MEDIUM: ssl: use TLSv1.2 as the minimum default on bind lines

Since HAProxy 1.8, the TLS default minimum version was set to TLSv1.0 to
avoid using the deprecated SSLv3.0. Since then, the standard changed and
the recommended TLS version is now TLSv1.2.

This patch changes the minimum default version to TLSv1.2 on bind lines.
If you need to use prior TLS version, this is still possible by
using the ssl-min-ver keyword.