bad input for --sslDisabledProtocols are not checked for windows / openssl

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Server Security
    • ALL
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ssl_manager_apple has
      for (const SSLParams::Protocols& protocol : *disabledProtocols) {
      if (protocol == SSLParams::Protocols::TLS1_0)

      { ... }

      else {
      return

      {ErrorCodes::InvalidSSLConfiguration, "Unknown disabled TLS protocol version"}

      ;
      }
      }

      but nothing like this is present in ssl_manager_windows and ssl_manager_openssl

            Assignee:
            Unassigned
            Reporter:
            Tianyu Wang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: