search

mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
357 stars 59 forks source link

Recent stunnel configurations don't reflect the selected option #227

Open janbrasna opened 6 months ago

janbrasna commented 6 months ago

The newly added stunnel might not work as intended.

I'm not sure the outputs reflect chosen configuration. For the default render (intermediate, latestVersion) I seem to be getting modern no matter what config I select — unless I manually downgrade the server version below tls13 when TLSv1.2-related output starts appearing reflecting parts of the chosen configuration level.

Is that as intended? It seems to hard-code the most restrictive flags based on the serverVersion and opensslVersion available, not taking the flexibility of the configs into account.

— Originally posted by @janbrasna in https://github.com/mozilla/ssl-config-generator/pull/119#pullrequestreview-1805178201

Not sure if bug or feature TBH.