Merge pull request #565 from JustAnotherArchivist/ssl-openssl3-unsafe-renegotiation

JustAnotherArchivist · web-flow · commit dd5ce62dc52e · 2023-11-30T05:53:43.000Z
Reenable unsafe renegotiation (cf. RFC 5746) and update openssl.conf for OpenSSL 3.x
diff --git a/ops/openssl-less-secure.cnf b/ops/openssl-less-secure.cnf
@@ -1,2 +1,12 @@
+openssl_conf = openssl_init
+
+[openssl_init]
+ssl_conf = ssl_sect
+
+[ssl_sect]
+system_default = system_default_sect
+
+[system_default_sect]
 MinProtocol = None
 CipherString = ALL
+Options = UnsafeLegacyRenegotiation
