From 25333b6451372ce4d5047da33419aa96a8c7dfbb Mon Sep 17 00:00:00 2001
From: Jan Andre Ikenmeyer <jan@ikenmeyer.eu>
Date: Fri, 10 May 2019 14:53:32 +0200
Subject: [PATCH] Disable TLS 1.0 and 1.1

---
 components/net/connector.rs | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/components/net/connector.rs b/components/net/connector.rs
index 1306c2d5609..45eda71bd6e 100644
--- a/components/net/connector.rs
+++ b/components/net/connector.rs
@@ -77,8 +77,13 @@ pub fn create_ssl_connector_builder(certs: &str) -> SslConnectorBuilder {
     ssl_connector_builder
         .set_cipher_list(DEFAULT_CIPHERS)
         .expect("could not set ciphers");
-    ssl_connector_builder
-        .set_options(SslOptions::NO_SSLV2 | SslOptions::NO_SSLV3 | SslOptions::NO_COMPRESSION);
+    ssl_connector_builder.set_options(
+        SslOptions::NO_SSLV2 |
+            SslOptions::NO_SSLV3 |
+            SslOptions::NO_TLSV1 |
+            SslOptions::NO_TLSV1_1 |
+            SslOptions::NO_COMPRESSION,
+    );
     ssl_connector_builder
 }