From cc2d529562edd2d2f5da9e59bb8548d861f94523 Mon Sep 17 00:00:00 2001
From: Zhongwen Deng <zhongwencool@gmail.com>
Date: Thu, 27 Apr 2023 17:28:22 +0800
Subject: [PATCH] feat: remove tlsv1.1,tlsv1,dtlsv1 from default ssl version

---
 apps/emqx/src/emqx.app.src    | 2 +-
 apps/emqx/src/emqx_schema.erl | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/apps/emqx/src/emqx.app.src b/apps/emqx/src/emqx.app.src
index d42478fea..5ca8fc797 100644
--- a/apps/emqx/src/emqx.app.src
+++ b/apps/emqx/src/emqx.app.src
@@ -3,7 +3,7 @@
     {id, "emqx"},
     {description, "EMQX Core"},
     % strict semver, bump manually!
-    {vsn, "5.0.24"},
+    {vsn, "5.0.25"},
     {modules, []},
     {registered, []},
     {applications, [
diff --git a/apps/emqx/src/emqx_schema.erl b/apps/emqx/src/emqx_schema.erl
index 69f234e47..1dd122ca6 100644
--- a/apps/emqx/src/emqx_schema.erl
+++ b/apps/emqx/src/emqx_schema.erl
@@ -2424,9 +2424,9 @@ client_ssl_opts_schema(Defaults) ->
         ].
 
 default_tls_vsns(dtls_all_available) ->
-    emqx_tls_lib:available_versions(dtls);
+    emqx_tls_lib:available_versions(dtls) -- [dtlsv1];
 default_tls_vsns(tls_all_available) ->
-    emqx_tls_lib:available_versions(tls).
+    emqx_tls_lib:available_versions(tls) -- ['tlsv1.1', tlsv1].
 
 -spec ciphers_schema(quic | dtls_all_available | tls_all_available | undefined) ->
     hocon_schema:field_schema().