Require TLS 1.2 minimum.
This prevents a downgrade attack to the vulnerable SSLv3. While here, go ahead and require at least TLS 1.2 since TLS 1.0 and 1.1 have their own set of issues and it's only a matter of time before those would need to be completely avoided as well. ok @davecgh
This commit is contained in:
parent
1c4ac4426c
commit
1d0c09a852
1 changed files with 1 additions and 0 deletions
|
@ -539,6 +539,7 @@ func newRPCServer(listenAddrs []string, s *server) (*rpcServer, error) {
|
|||
|
||||
tlsConfig := tls.Config{
|
||||
Certificates: []tls.Certificate{keypair},
|
||||
MinVersion: tls.VersionTLS12,
|
||||
}
|
||||
|
||||
// TODO(oga) this code is similar to that in server, should be
|
||||
|
|
Loading…
Add table
Reference in a new issue