diff --git a/src/helpers.rs b/src/helpers.rs index 6be1df71..03bf97c9 100644 --- a/src/helpers.rs +++ b/src/helpers.rs @@ -53,6 +53,10 @@ pub fn new_reqwest_client_builder() -> ClientBuilder { if let Some((https_only, min_tls_ver_opt)) = REQWESTGLOBALCONFIG.get() { builder = builder.https_only(*https_only); + if *https_only { + builder = builder.min_tls_version(reqwest::tls::Version::TLS_1_2); + } + if let Some(min_tls_ver) = *min_tls_ver_opt { builder = builder.min_tls_version(min_tls_ver.into()); } diff --git a/src/main.rs b/src/main.rs index 10b9f034..5b2294ac 100644 --- a/src/main.rs +++ b/src/main.rs @@ -84,7 +84,10 @@ struct Options { #[clap(long)] no_cleanup: bool, - /// Enable https only mode + /// Enable https only mode. + /// + /// When https only mode is enabled, it will also set + /// minimum TLS version to tls1_2. #[clap(long)] https_only_mode: bool,