Browse Source

Added NSTemporaryExceptionMinimumTLSVersion documentation to the README.

Marandon Antoine 10 years ago
parent
commit
9ef1602fe2
1 changed files with 4 additions and 1 deletions
  1. 4 1
      README.md

+ 4 - 1
README.md

@@ -1101,13 +1101,16 @@ If you run into this problem (high probability with self-signed certificates), y
 				<false/>
 				<false/>
 				<key>NSIncludesSubdomains</key>
 				<key>NSIncludesSubdomains</key>
 				<true/>
 				<true/>
+				<!-- Optional: Specify minimum TLS version -->
+				<key>NSTemporaryExceptionMinimumTLSVersion</key>
+				<string>TLSv1.2</string>
 			</dict>
 			</dict>
 		</dict>
 		</dict>
 	</dict>
 	</dict>
 </dict>
 </dict>
 ```
 ```
 
 
-Whether you need to set the `NSExceptionRequiresForwardSecrecy` to `NO` depends on whether your TLS connection is using an allowed cipher suite. In certain cases, it will need to be set to `NO`. The `NSExceptionAllowsInsecureHTTPLoads` MUST be set to `YES` in order to allow the `SessionDelegate` to receive challenge callbacks. Once the challenge callbacks are being called, the `ServerTrustPolicyManager` will take over the server trust evaluation.
+Whether you need to set the `NSExceptionRequiresForwardSecrecy` to `NO` depends on whether your TLS connection is using an allowed cipher suite. In certain cases, it will need to be set to `NO`. The `NSExceptionAllowsInsecureHTTPLoads` MUST be set to `YES` in order to allow the `SessionDelegate` to receive challenge callbacks. Once the challenge callbacks are being called, the `ServerTrustPolicyManager` will take over the server trust evaluation. You may also need to specify the `NSTemporaryExceptionMinimumTLSVersion` if you're trying to connect to a host that only supports TLS versions less than `1.2`.
 
 
 > It is recommended to always use valid certificates in production environments.
 > It is recommended to always use valid certificates in production environments.