Merge remote-tracking branch 'origin/master' into 4.x

.github/lock.yml

@@ -1,7 +1,7 @@
 # Configuration for lock-threads - https://github.com/dessant/lock-threads
 
 # Number of days of inactivity before a closed issue or pull request is locked
-daysUntilLock: 365
+daysUntilLock: 200
 
 # Issues and pull requests with these labels will not be locked. Set to `[]` to disable
 exemptLabels: []
@@ -25,4 +25,4 @@ issues:
  lockLabel: outdated
 
 pulls:
- daysUntilLock: 180
+ daysUntilLock: 90

.github/stale.yml

@@ -1,7 +1,7 @@
 # Number of days of inactivity before an issue becomes stale
-daysUntilStale: 60
+daysUntilStale: 30
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 15
+daysUntilClose: 5
 # Issues with these labels will never be considered stale
 exemptLabels:
   - High Priority

CHANGELOG.md

@@ -44,6 +44,15 @@ All notable changes to this project will be documented in this file. See [standa
 * replaced lunr by lunr-mutable ([#915](https://github.com/verdaccio/verdaccio/issues/915)) ([1602840](https://github.com/verdaccio/verdaccio/commit/1602840))
 * verdaccio update notification on CLI ([#988](https://github.com/verdaccio/verdaccio/issues/988)) ([#998](https://github.com/verdaccio/verdaccio/issues/998)) ([bc04703](https://github.com/verdaccio/verdaccio/commit/bc04703))
 
+<a name="3.10.1"></a>
+## [3.10.1](https://github.com/verdaccio/verdaccio/compare/v3.10.0...v3.10.1) (2018-12-20)
+
+
+### Bug Fixes
+
+* remove useless secureProtocol option ([#1158](https://github.com/verdaccio/verdaccio/issues/1158)) ([c99266d](https://github.com/verdaccio/verdaccio/commit/c99266d))
+
+
 
 <a name="3.10.0"></a>
 # [3.10.0](https://github.com/verdaccio/verdaccio/compare/v3.9.0...v3.10.0) (2018-12-06)

src/lib/bootstrap.js

@@ -94,8 +94,7 @@ function logHTTPSWarning(storageLocation) {
 function handleHTTPS(app, configPath, config) {
   try {
     let httpsOptions = {
-      secureProtocol: 'SSLv23_method', // disable insecure SSLv2 and SSLv3
-      secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3,
+      secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3, // disable insecure SSLv2 and SSLv3
     };
 
     if (config.https.pfx) {