From: Henry <cryptix@riseup.net>
Date: Thu, 11 Dec 2014 10:14:41 +0000 (+0100)
Subject: increase minimum version vor HTTPS to TLS 1.0 (POODLE, fixes #730)
X-Git-Tag: v0.9.99~1586^2
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=4f4392b83efe13744198db13c622068f69071612;p=gitea.git

increase minimum version vor HTTPS to TLS 1.0 (POODLE, fixes #730)
---

diff --git a/cmd/web.go b/cmd/web.go
index ba999dbf98..30a2cd991d 100644
--- a/cmd/web.go
+++ b/cmd/web.go
@@ -5,6 +5,7 @@
 package cmd
 
 import (
+	"crypto/tls"
 	"fmt"
 	"html/template"
 	"io/ioutil"
@@ -453,7 +454,9 @@ func runWeb(*cli.Context) {
 	case setting.HTTP:
 		err = http.ListenAndServe(listenAddr, m)
 	case setting.HTTPS:
-		err = http.ListenAndServeTLS(listenAddr, setting.CertFile, setting.KeyFile, m)
+		cfg := &tls.Config{MinVersion: tls.VersionTLS10}
+		server := &http.Server{Addr: listenAddr, TLSConfig: cfg, Handler: m}
+		err = server.ListenAndServeTLS(setting.CertFile, setting.KeyFile)
 	case setting.FCGI:
 		err = fcgi.Serve(nil, m)
 	default: