#55 Remove tlslayer
Closed: Fixed None Opened 7 years ago by cheimes.

I noticed that tlslayer-o.c (OpenSSL) is insecure. It does neither configure secure TLS/SSL versions nor secure ciphers. OpenSSL's defaults aren't very secure. Most importantly the OpenSSL layer lacks hostname matching to SAN/CN fields.

Since tlslayer is not used at all, Nalin suggested to remove the files all along.


cheimes: just git rm the files and remove tlslayer from Makefile.am

Should be fixed as of 756ae4f, closing.

Metadata Update from @rcritten:
- Issue set to the milestone: 0.79

7 years ago

Login to comment on this ticket.

Metadata