bad input for --sslDisabledProtocols are not checked for windows / openssl

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Server Security
    • ALL
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ssl_manager_apple has
      for (const SSLParams::Protocols& protocol : *disabledProtocols) {
      if (protocol == SSLParams::Protocols::TLS1_0)

      { ... }

      else {
      return

      {ErrorCodes::InvalidSSLConfiguration, "Unknown disabled TLS protocol version"}

      ;
      }
      }

      but nothing like this is present in ssl_manager_windows and ssl_manager_openssl

              Assignee:
              Unassigned
              Reporter:
              Tianyu Wang
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: