commit ae2e8647aa306e03006049e6480e10f4df76b7cc
author Guido Urdaneta <guidou@webrtc.org> Mon Oct 26 09:55:26 2020 +0100
committer Commit Bot <commit-bot@chromium.org> Mon Oct 26 10:45:06 2020 +0000
tree 7f891d75e0dafd77acc8e9ff1875028f5aa871fa
parent 71002a226ac53f5a8ae2eb403fa4269adecc52c1

Remove support for legacy TLS protocols by default

Now this requires explicitly passing the
WebRTC-LegacyTlsProtocols/Enabled/ field trial flag or an override.

Bug: webrtc:10261
Change-Id: Ib880bcc50cec0a21dcaa4784c228cacb020e5568
NOKEYCHECK: true
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/190282
Reviewed-by: Harald Alvestrand <hta@webrtc.org>
Commit-Queue: Guido Urdaneta <guidou@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#32488}

rtc_base/openssl_stream_adapter.cc

diff --git a/rtc_base/openssl_stream_adapter.cc b/rtc_base/openssl_stream_adapter.cc
index 5790b1b..f59b4ed 100644
--- a/rtc_base/openssl_stream_adapter.cc
+++ b/rtc_base/openssl_stream_adapter.cc
@@ -278,7 +278,7 @@
 bool ShouldAllowLegacyTLSProtocols() {
   return g_use_legacy_tls_protocols_override.load()
              ? g_allow_legacy_tls_protocols.load()
-             : !webrtc::field_trial::IsDisabled("WebRTC-LegacyTlsProtocols");
+             : webrtc::field_trial::IsEnabled("WebRTC-LegacyTlsProtocols");
 }
 
 OpenSSLStreamAdapter::OpenSSLStreamAdapter(