From 33a7743867d99a1ad96c146ff618a6d27c5f9b0b Mon Sep 17 00:00:00 2001 From: crozzy Date: Thu, 4 Jan 2024 15:24:45 -0800 Subject: [PATCH] config: update minimum TLS version for server The config is used both when setting up the HTTP API and for the notifier's Deliverer. Signed-off-by: crozzy --- config/tls.go | 1 + 1 file changed, 1 insertion(+) diff --git a/config/tls.go b/config/tls.go index 7761459214..5d4812cbb1 100644 --- a/config/tls.go +++ b/config/tls.go @@ -58,6 +58,7 @@ func (t *TLS) Config() (*tls.Config, error) { return nil, fmt.Errorf("failed to read x509 cert and key pair: %w", err) } cfg.Certificates = append(cfg.Certificates, cert) + cfg.MinVersion = tls.VersionTLS12 return &cfg, nil }