[TLS-5] Add option to configure a range of TLS protocols

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Fixed
    • Priority: Major - P3
    • 9.0.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Server Security
    • Fully Compatible
    • Monguard 2026-03-27, Monguard 2026-05-01
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Add an config option to configure a range of TLS protocols that monguard should support from TLS 1.0 - TLS 1.3.

      The config option is optional. If it is not specified, then the default range should be TLS 1.2 - 1.3, which is consistent with the server.

      Although TLS 1.0 and 1.1 are outdated and deprecated, the server still permits them via explicit configuration. Removing support for them in monguard right away risks backwards compatibility issues. We should log a warning if the supplied range allows for TLS 1.0 and 1.1, but not disallow it.

      All of this should get propagated into OpenSSL.

            Assignee:
            Anand Paithankar
            Reporter:
            Varun Ravichandran
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: