This is an automated email from the git hooks/post-receive script. mreynolds pushed a commit to branch 389-ds-base-1.4.1 in repository 389-ds-base. The following commit(s) were added to refs/heads/389-ds-base-1.4.1 by this push: new de5e4ac Issue 50834 - Incorrectly setting the NSS default SSL version max de5e4ac is described below commit de5e4acffd5e463c96502d8683ae213bf277ba32 Author: Mark Reynolds <mreynolds(a)redhat.com&gt; AuthorDate: Mon Jan 20 13:16:36 2020 -0500 Issue 50834 - Incorrectly setting the NSS default SSL version max Description: We've been using the wrong function to get the NSS max version We were calling SSL_VersionRangeGetSupported() which gets the versions NSS "can" handle, but SSL_VersionRangeGetDefault() gets the versions that are actually "enabled". relates: https://pagure.io/389-ds-base/issue/50834 Reviewed by: mreynolds(one line commit rule) --- ldap/servers/slapd/ssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ldap/servers/slapd/ssl.c b/ldap/servers/slapd/ssl.c index 8365b29..9296cd4 100644 --- a/ldap/servers/slapd/ssl.c +++ b/ldap/servers/slapd/ssl.c @@ -936,7 +936,7 @@ slapd_nss_init(int init_ssl __attribute__((unused)), int config_available __attr char *certdir; char emin[VERSION_STR_LENGTH], emax[VERSION_STR_LENGTH]; /* Get the range of the supported SSL version */ - SSL_VersionRangeGetSupported(ssl_variant_stream, &enabledNSSVersions); + SSL_VersionRangeGetDefault(ssl_variant_stream, &enabledNSSVersions); (void)slapi_getSSLVersion_str(enabledNSSVersions.min, emin, sizeof(emin)); (void)slapi_getSSLVersion_str(enabledNSSVersions.max, emax, sizeof(emax)); -- To stop receiving notification emails like this one, please contact the administrator of this repository.