as of OTP 23 we are running into the issue that SSLv3 is no longer supported, which in itself is great. Howerver it seems that
HTTPPoison still attempts to use it, which raises an error.
This is easy to fix by simply adding [ssl: [versions: :"tlsv1.2"]] as an option when making HTTP requests. However, this become quite the maintenance burden when having to retroactively add this to every since request.
Skimming through the source code of hackney and HTTPPoison I did not see a config value to specify this as a default, but I'm quite sure I missed something as this seems like a common use case.
Fudoshiki
commented
3 years ago
Hello there,
as of OTP 23 we are running into the issue that SSLv3 is no longer supported, which in itself is great. Howerver it seems that HTTPPoison still attempts to use it, which raises an error.
This is easy to fix by simply adding
[ssl: [versions: :"tlsv1.2"]]as an option when making HTTP requests. However, this become quite the maintenance burden when having to retroactively add this to every since request.Skimming through the source code of hackney and HTTPPoison I did not see a config value to specify this as a default, but I'm quite sure I missed something as this seems like a common use case.
Thank you for your time