upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-06-04 14:25:35 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

command: Set minimum TLS version to 1.2

Browse source
This commit is contained in:
Armon Dadgar 2015-04-13 13:00:01 -07:00
parent 9af81182f0
commit 723860fa96
2 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
command/meta.go
View file

@ -67,6 +67,7 @@ func (m *Meta) Client() (*api.Client, error) {
if m.flagCACert != "" || m.flagCAPath != "" || m.flagInsecure {
tlsConfig := &tls.Config{
InsecureSkipVerify: m.flagInsecure,
MinVersion: tls.VersionTLS12,
}
// TODO: Root CAs

1
command/server/listener.go
View file

@ -53,6 +53,7 @@ func listenerWrapTLS(
tlsConf := &tls.Config{}
tlsConf.Certificates = []tls.Certificate{cert}
tlsConf.NextProtos = []string{"http/1.1"}
tlsConf.MinVersion = tls.VersionTLS12 // Minimum version is TLS 1.2
ln = tls.NewListener(ln, tlsConf)
props["tls"] = "enabled"