TLS: warn if no SSL/TLS protocols enabled

8 years ago · c64e9992e6
parent e94ab10e14
commit c64e9992e6
1 changed files with 9 additions and 1 deletions
--- a/libxrdp/xrdp_rdp.c
+++ b/libxrdp/xrdp_rdp.c
@ -194,6 +194,14 @@ xrdp_rdp_read_config(struct xrdp_client_info *client_info)
                log_message(LOG_LEVEL_DEBUG, "SSLv3 enabled");
                client_info->ssl_protocols &= ~SSL_OP_NO_SSLv3;
            }
+
+            if (client_info->ssl_protocols ==
+                (SSL_OP_NO_SSLv3 | SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2))
+            {
+                log_message(LOG_LEVEL_WARNING, "No SSL/TLS protocols enabled. "
+                            "At least one protocol should be enabled to accept "
+                            "TLS connections.");
+            }
        }
        else if (g_strcasecmp(item, "tls_ciphers") == 0)
        {