[gentoo-dev] News item: >=net-p2p/syncthing-1.17.0 incompatibility with

[Marek Szuba]

Nb. 1.17.0 has not come out yet but given 1.17.0-rc.3 came out 3 days ago and Syncthing upstream normally only has 3 release candidates before an actual release, we can expect it to come out quite soon.

 * * *

Title: >=net-p2p/syncthing-1.17.0 to only allow TLS 1.3 for sync connections
Author: Marek Szuba <mare...@gentoo.org>
Posted: 2021-05-18
Revision: 1
News-Item-Format: 2.0
Display-If-Installed: net-p2p/syncthing

Starting with version 1.17.0, net-p2p/syncthing by default only allows
TLS 1.3 for sync connections - making it impossible to sync with devices
not supporting, i.e. running Syncthing versions older than 1.3.0.



https://docs.syncthing.net/advanced/option-insecure-allow-old-tls-versions.html


--
Marecki

If you do require your Syncthing cluster to support TLS 1.2, you will have to explicitly allow it by enabling the option "insecureAllowOldTLSVersions". For details see:

OpenPGP_signature
Description: OpenPGP digital signature