Default tlsv1.3 to false in Project / EditorSettings

This commit is contained in:
lawnjelly
2025-10-06 09:52:10 +01:00
parent 6bc378e13c
commit 537cc77654
3 changed files with 3 additions and 3 deletions

View File

@ -1312,7 +1312,7 @@
The CA certificates bundle to use for SSL connections. If this is set to a non-empty value, this will [i]override[/i] Godot's default [url=https://github.com/godotengine/godot/blob/master/thirdparty/certs/ca-certificates.crt]Mozilla certificate bundle[/url]. If left empty, the default certificate bundle will be used.
If in doubt, leave this setting empty.
</member>
<member name="network/ssl/enable_tls_v1.3" type="bool" setter="" getter="" default="true">
<member name="network/ssl/enable_tls_v1.3" type="bool" setter="" getter="" default="false">
If [code]true[/code], enable TLSv1.3 negotiation.
[b]Note:[/b] Only supported when using Mbed TLS 3.0 or later (Linux distribution packages may be compiled against older system Mbed TLS packages), otherwise the maximum supported TLS version is always TLSv1.2.
</member>

View File

@ -677,7 +677,7 @@ void EditorSettings::_load_defaults(Ref<ConfigFile> p_extra_config) {
// SSL
_initial_set("network/ssl/editor_ssl_certificates", _SYSTEM_CERTS_PATH);
hints["network/ssl/editor_ssl_certificates"] = PropertyInfo(Variant::STRING, "network/ssl/editor_ssl_certificates", PROPERTY_HINT_GLOBAL_FILE, "*.crt,*.pem", PROPERTY_USAGE_DEFAULT | PROPERTY_USAGE_RESTART_IF_CHANGED);
_initial_set("network/ssl/enable_tls_v1.3", true);
_initial_set("network/ssl/enable_tls_v1.3", false);
// HTTP Proxy
_initial_set("network/http_proxy/host", "");

View File

@ -73,7 +73,7 @@ int godot_mbedtls_mutex_unlock(mbedtls_threading_mutex_t *p_mutex) {
#endif
void register_mbedtls_types() {
GLOBAL_DEF("network/ssl/enable_tls_v1.3", true);
GLOBAL_DEF("network/ssl/enable_tls_v1.3", false);
#ifdef GODOT_MBEDTLS_THREADING_ALT
mbedtls_threading_set_alt(