Support older versions of TLS regardless of Go defaults (#671)

* Explicitly allow TLS1.0 in HTTP client

* Add CHANGELOG.md entry
This commit is contained in:
Joona Hoikkala 2023-04-21 17:44:24 +03:00 committed by GitHub
parent 627c8710cd
commit a3bd865aef
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 0 deletions

View file

@ -2,6 +2,7 @@
- master
- New
- Changed
- Explicitly allow TLS1.0
- v2.0.0
- New

View file

@ -59,6 +59,7 @@ func NewSimpleRunner(conf *ffuf.Config, replay bool) ffuf.RunnerProvider {
TLSHandshakeTimeout: time.Duration(time.Duration(conf.Timeout) * time.Second),
TLSClientConfig: &tls.Config{
InsecureSkipVerify: true,
MinVersion: tls.VersionTLS10,
Renegotiation: tls.RenegotiateOnceAsClient,
ServerName: conf.SNI,
},