changeset 458:cfbe6acc1d73

urllog: tcl-tls 1.7.x (tested with 1.7.13) is now a requirement. It is needed for SNI support. Theoretically 1.6.4 would work also, if implementation was done differently, but it's hairy and I'm too lazy.
author Matti Hamalainen <ccr@tnsp.org>
date Tue, 17 Oct 2017 10:58:02 +0300
parents a7029d65796b
children 6acd372d36da
files urllog.tcl
diffstat 1 files changed, 4 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/urllog.tcl	Tue Oct 17 09:27:35 2017 +0300
+++ b/urllog.tcl	Tue Oct 17 10:58:02 2017 +0300
@@ -7,6 +7,9 @@
 #
 ##########################################################################
 #
+# NOTICE! NOTICE! This script REQUIRES tcl-tls 1.7.13+ if you wish to
+# support SSL/TLS https for URL checking. And you probably do.
+#
 # URL-logger script for EggDrop IRC robot, utilizing SQLite3 database
 # This script requires SQLite TCL extension. Under Debian, you need:
 # tcl8.5 libsqlite3-tcl (and eggdrop eggdrop-data, of course)
@@ -84,7 +87,7 @@
 
 if {[info exists http_tls_support] && $http_tls_support != 0} {
   package require tls
-  ::http::register https 443 [list ::tls::socket -request 1 -require 1 -tls1 1 -cadir $http_tls_cadir]
+  ::http::register https 443 [list ::tls::socket -request true -require true -ssl2 false -ssl3 false -tls1 true -tls1.1 true -tls1.2 true -cadir $http_tls_cadir -autoservername true]
   putlog " (TLS/SSL support enabled)"
 }