Set SECLEVEL=0 for openssl 3 to support Old config

github: closes #188
mozilla · Nov 11, 2024 · d01b687 · d01b687
1 parent 66667fa
commit d01b687
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/js/state.js b/src/js/state.js
@@ -41,6 +41,13 @@ export default async function () {
   } else {
     ciphers = ciphers;
   }
+  if (ciphers.length && ciphers[0] === '@SECLEVEL=0') ciphers.shift();
+  if (configs[server].usesOpenssl !== false && minver('3.0.0', form['openssl'].value)) {
+    // set SECLEVEL=0 via cipher string to support TLSv1-1.1 "old" with OpenSSL 3.x
+    if (protocols.includes('TLSv1.1')) {
+      if (ciphers[0] !== '@SECLEVEL=0') ciphers.unshift('@SECLEVEL=0');
+    }
+  }
 
   const state = {
     form: {