re: bozohttpd(8): Make SSL protocol version selection a runtime option.

2020-10-29 Thread matthew green
this looks much better. if someone doesn't beat me too it, i'll merge this in soon. thanks! .mrg.

Re: bozohttpd(8): Make SSL protocol version selection a runtime option.

2020-10-27 Thread Sunil Nimmagadda
matthew green wrote: > hi Sunil, > > > thanks for the patch. i meant to reply earlier. > > can you explain why you want to enable the old ssl/tls > variants that we know are insecure? The initial version was to preserve compatibility setting from the compile time BOZO_SSL_OPTIONS with this ru

re: bozohttpd(8): Make SSL protocol version selection a runtime option.

2020-10-27 Thread matthew green
hi Sunil, thanks for the patch. i meant to reply earlier. can you explain why you want to enable the old ssl/tls variants that we know are insecure? i don't know that i want to have an option to enable them without a special compile, but i'm willing to be convinced. thanks. .mrg.

Re: bozohttpd(8): Make SSL protocol version selection a runtime option.

2020-10-27 Thread Sunil Nimmagadda
ping! Sunil Nimmagadda wrote: > Hi, > > I need to remember to recompile/install bozohttpd(8) on every binary > upgrade if I change the minimum protocol version using 'BOZO_SSL_OPTIONS' > at compile time. Similar to '-z' ciphers option, the attached diff > allows to specify a minimum protocol ver

bozohttpd(8): Make SSL protocol version selection a runtime option.

2020-10-21 Thread Sunil Nimmagadda
Hi, I need to remember to recompile/install bozohttpd(8) on every binary upgrade if I change the minimum protocol version using 'BOZO_SSL_OPTIONS' at compile time. Similar to '-z' ciphers option, the attached diff allows to specify a minimum protocol version at runtime using an option '-m' that ac