On 07/06/2019 18:09, Marc MERLIN wrote:
> tls_require_ciphers = NORMAL:%COMPAT
> tls_require_ciphers = NORMAL:%LATEST_RECORD_VERSION:-VERS-SSL3.0
> tls_require_ciphers = SECURE128
I see you're already fixed, but something along the lines of
NORMAL:!VERS-TLS1.3
See
https://gnutls.org/manual/html_node/Priority-Strings.html
for the full horror.
--
Cheers,
Jeremy