From b471f094c2a2e25cbe0797653758f586fa381751 Mon Sep 17 00:00:00 2001
From: zzak <zzak@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Thu, 8 Oct 2015 05:26:44 +0000
Subject: * ext/openssl/lib/openssl/ssl.rb: Default to TLSv1.2 and drop TLS v1 
  Patch provided by @claudijd [Fixes GH-873] [Feature #11524]:  
 https://github.com/ruby/ruby/pull/873

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@52082 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 NEWS | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index 8a4141e198..16c4a2b62b 100644
--- a/NEWS
+++ b/NEWS
@@ -129,6 +129,8 @@ with all sufficient information, see the ChangeLog file.
 * OpenSSL
   * OpenSSL::SSL::SSLSocket#accept_nonblock and
     OpenSSL::SSL::SSLSocket#connect_nonblock supports `exception: false`.
+  * OpenSSL::SSL::SSLContext defaults to TLS v1.2.
+    Please use `ctx.ssl_version = :TLSv1` or `:SSLv23` at your own risk.
 
 * Pathname
   * Pathname#descend and Pathname#ascend supported blockless form.
-- 
cgit v1.2.3