From 5882c9b456a5cc46d2d00a248f93593ada699724 Mon Sep 17 00:00:00 2001
From: Badlop <badlop@process-one.net>
Date: Thu, 21 Sep 2017 16:28:17 +0200
Subject: [PATCH] Add some recommended TLSOPTS as comments in the default
 config (#2004)

---
 ejabberd.yml.example | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ejabberd.yml.example b/ejabberd.yml.example
index 5f747144f..bc82b13da 100644
--- a/ejabberd.yml.example
+++ b/ejabberd.yml.example
@@ -111,8 +111,10 @@ hosts:
 ##   'CERTFILE': "/path/to/xmpp.pem"
 ##   'CIPHERS': "ECDH:DH:!3DES:!aNULL:!eNULL:!MEDIUM@STRENGTH"
 ##   'TLSOPTS':
+##     - "no_sslv2"
 ##     - "no_sslv3"
 ##     - "no_tlsv1"
+##     - "no_tlsv1_1"
 ##     - "cipher_server_preference"
 ##     - "no_compression"
 ##   'DHFILE': "/path/to/dhparams.pem" # generated with: openssl dhparam -out dhparams.pem 2048