search

mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
374 stars 60 forks source link

New stunnel template doesn't reflect selected configs #227

Closed janbrasna closed 1 month ago

janbrasna commented 10 months ago

The newly added stunnel does not seem to work as intended:

I'm not sure the outputs reflect chosen configuration. For the default render (intermediate, latestVersion) I seem to be getting modern no matter what config I select — unless I manually downgrade the server version below tls13 when TLSv1.2-related output starts appearing reflecting parts of the chosen configuration level.

Is that as intended? It seems to hard-code the most restrictive flags based on the serverVersion and opensslVersion available, not taking the flexibility of the configs into account.

— Originally posted by @janbrasna in https://github.com/mozilla/ssl-config-generator/pull/119#pullrequestreview-1805178201