jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Document TLSv1.3 support

Browse Source
This commit is contained in:
Koichiro IWAO 2018-08-16 11:42:46 +09:00
parent 74497752dc
commit 1ad8cbb2a0
No known key found for this signature in database
GPG Key ID: 9F72CDBC01BF10EB
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/man/xrdp.ini.5.in
View File

@ -144,7 +144,7 @@ Negotiate these security methods with clients.
.RE .RE
.TP .TP
\fBssl_protocols\fP=\fI[SSLv3] [TLSv1] [TLSv1.1] [TLSv1.2]\fP \fBssl_protocols\fP=\fI[SSLv3] [TLSv1] [TLSv1.1] [TLSv1.2] [TLSv1.3]\fP
Enables the specified SSL/TLS protocols. Each value should be separated by comma. Enables the specified SSL/TLS protocols. Each value should be separated by comma.
SSLv2 is always disabled. At least one protocol should be given to accept TLS connections. SSLv2 is always disabled. At least one protocol should be given to accept TLS connections.
This parameter is effective only if \fBsecurity_layer\fP is set to \fBtls\fP or \fBnegotiate\fP. This parameter is effective only if \fBsecurity_layer\fP is set to \fBtls\fP or \fBnegotiate\fP.

4
xrdp/xrdp.ini.in
View File

@ -28,8 +28,8 @@ crypt_level=high
certificate= certificate=
key_file= key_file=
; set SSL protocols ; set SSL protocols
; can be comma separated list of 'SSLv3', 'TLSv1', 'TLSv1.1', 'TLSv1.2' ; can be comma separated list of 'SSLv3', 'TLSv1', 'TLSv1.1', 'TLSv1.2', 'TLSv1.3'
ssl_protocols=TLSv1, TLSv1.1, TLSv1.2 ssl_protocols=TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
; set TLS cipher suites ; set TLS cipher suites
#tls_ciphers=HIGH #tls_ciphers=HIGH