Bug#982745: nginx-common: don't enable TLSv1 or TLSv1.1 in default configuration

2021-04-23 Thread Chris Hofstaedtler
* didi.deb...@cknow.org [210423 21:23]: > TLSv1.2 was defined in 2008, so I don't think it's to 'wild' to use that > as a default for security in the default configuration of nginx for Bullseye. You seem to neglect to mention that SSL/TLS is disabled in the default configuration. I agree that sug

Processed: Re: Bug#982745: nginx-common: don't enable TLSv1 or TLSv1.1 in default configuration)

2021-04-20 Thread Debian Bug Tracking System
Processing control commands: > severity -1 grave Bug #982745 [nginx-common] nginx-common: don't enable TLSv1 or TLSv1.1 in default configuration Severity set to 'grave' from 'normal' > notforwarded -1 Bug #982745 [nginx-common] nginx-common: don't enable TLSv1 or TLSv1.1 in default configuration