aniani/gitea
1
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2024-11-04 08:17:24 -05:00
Code

Merge pull request #731 from cryptix/dev

Browse Source 
increase minimum version for HTTPS to TLS 1.0 (POODLE, fixes #730)
This commit is contained in:
无闻 2014-12-11 18:32:49 -05:00
commit 35140f1cc7
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cmd/web.go
View File

@ -5,6 +5,7 @@
package cmd package cmd
import ( import (
"crypto/tls"
"fmt" "fmt"
"html/template" "html/template"
"io/ioutil" "io/ioutil"
@ -453,7 +454,9 @@ func runWeb(*cli.Context) {
case setting.HTTP: case setting.HTTP:
err = http.ListenAndServe(listenAddr, m) err = http.ListenAndServe(listenAddr, m)
case setting.HTTPS: case setting.HTTPS:
err = http.ListenAndServeTLS(listenAddr, setting.CertFile, setting.KeyFile, m) cfg := &tls.Config{MinVersion: tls.VersionTLS10}
server := &http.Server{Addr: listenAddr, TLSConfig: cfg, Handler: m}
err = server.ListenAndServeTLS(setting.CertFile, setting.KeyFile)
case setting.FCGI: case setting.FCGI:
err = fcgi.Serve(nil, m) err = fcgi.Serve(nil, m)
default: default: