SSL services: Difference between revisions

Line 412: Line 412:


= SslVersion =
= SslVersion =
This is "nn::ssl::sf::SslVersion" or "nn::ssl::Context::SslVersion". This is a bitmask which controls the min/max TLS versions to use, depending on which lowest/highest bits are set (if Auto isn't set). Auto uses min=1.0/max=1.2.
This is "nn::ssl::sf::SslVersion" or "nn::ssl::Context::SslVersion".


Auto/bit24 uses min=TlsV10 max=TlsV12.
This is a bitmask which controls the min/max TLS versions to use, depending on which lowest/highest bits are set (if Auto isn't set).


[12.0.3+] TLS 1.3 is no longer used: the TlsV13 bit is now handled the same as TlsV12 (uses TLS 1.2), and both Auto bits only use TLS 1.2 for the maximum.
Auto uses min=TlsV10 max=TlsV12. ApiVersion is 1.
 
[12.0.0+] Auto now uses min=TlsV10 max=TlsV13. ApiVersion is now 2.
 
[12.0.3+] TLS 1.3 is no longer used. The TlsV13 bit is now handled the same as TlsV12 (uses TLS 1.2), and Auto only uses TLS 1.2 for the maximum.


{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Bit
! Bits
! Description
! Description
|-
|-
Line 433: Line 437:
| 6 || [11.0.0+] TlsV13
| 6 || [11.0.0+] TlsV13
|-
|-
| 24 || [11.0.0+] Same as Auto.
| 24-31 || [11.0.0+] ApiVersion
|}
|}