lighttpd 1.4.78 prep

lighttpd 1.4.78 will default to TLSv1.3
mozilla · Oct 11, 2024 · 9be5d30 · 9be5d30
1 parent 21a36e4
commit 9be5d30
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/src/templates/partials/lighttpd.hbs b/src/templates/partials/lighttpd.hbs
@@ -21,11 +21,17 @@ ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1")
    {{else if (includes "TLSv1.1" output.protocols)}}
 ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1.1")
    {{else if (includes "TLSv1.2" output.protocols)}}
-    {{#unless (minver "1.4.56" form.serverVersion)}}
+    {{#if (minver "1.4.78" form.serverVersion)}}
 ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1.2")
-    {{/unless}}
-   {{else}}
+    {{else}}
+     {{#unless (minver "1.4.56" form.serverVersion)}}
+ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1.2")
+     {{/unless}}
+    {{/if}}
+   {{else if (includes "TLSv1.3" output.protocols)}}
+    {{#unless (minver "1.4.78" form.serverVersion)}}
 ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1.3")
+    {{/unless}}
    {{/if}}
   {{else}}
 ssl.openssl.ssl-conf-cmd = ("Protocol" => "ALL, -SSLv2, -SSLv3{{#unless (includes "TLSv1" output.protocols)}}, -TLSv1{{/unless}}{{#unless (includes "TLSv1.1" output.protocols)}}, -TLSv1.1{{/unless}}{{#unless (includes "TLSv1.2" output.protocols)}}, -TLSv1.2{{/unless}}")