diff CHANGES.txt @ 6502:7fb13dc67a41

roundup-server native SSL support only TLS 1.2. 1.1 was suported but is deprecated.
author John Rouillard <rouilj@ieee.org>
date Thu, 30 Sep 2021 19:17:56 -0400
parents 808f7a8ed2b6
children e162845193c4
line wrap: on
line diff
--- a/CHANGES.txt	Mon Sep 06 18:08:14 2021 -0400
+++ b/CHANGES.txt	Thu Sep 30 19:17:56 2021 -0400
@@ -18,6 +18,11 @@
 - issue2551161 - Fix ResourceWarnings when running with -W default.
   Cleaned up leaking file descriptors from zopetal pre-compile, python
   module compile and loading localization file. (John Rouillard) 
+- When using roundup-server with native SSL, only accept TLS v1.2.
+  Previously it used to accept only TLS v1.1. 1.1 is deprecated by
+  chrome. I don't expect this to be a major problem since a front
+  end server (apache, Nginx...) is usually customer facing and
+  terminates SSL.
 
 Features:
 

Roundup Issue Tracker: http://roundup-tracker.org/