diff --git a/conf/kore.conf.example b/conf/kore.conf.example index d535717..501a1fe 100644 --- a/conf/kore.conf.example +++ b/conf/kore.conf.example @@ -189,12 +189,13 @@ validator v_regex regex ^/test/[a-z]*$ validator v_number regex ^[0-9]*$ validator v_session function v_session_validate -# Specify what TLS version to be used. Default is TLSv1.2 +# Specify what TLS version to be used. Default is TLSv1.3 if available. +# Otherwise it will use TLS 1.2. # Allowed values: -# 1.2 for TLSv1.2 (default) -# 1.0 for TLSv1.0 -# both for TLSv1.0 and TLSv1.2 -#tls_version 1.2 +# 1.3 for TLSv1.3 (default, if available) +# 1.2 for TLSv1.2 +# both for TLSv1.2 and TLSv1.3 +#tls_version 1.3 # Specify the TLS ciphers that will be used. #tls_cipher ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!kRSA:!kDSA