From 702e98c5ec7b11f3c988d61dccbec71e1e69a8bd Mon Sep 17 00:00:00 2001 From: zeripath Date: Wed, 2 Sep 2020 23:37:49 +0100 Subject: [PATCH] Set TLS minimum version to 1.2 (#12689) Signed-off-by: Andrew Thornton --- modules/graceful/server.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/modules/graceful/server.go b/modules/graceful/server.go index 4d0d8677f0..db73174ac1 100644 --- a/modules/graceful/server.go +++ b/modules/graceful/server.go @@ -128,6 +128,8 @@ func (srv *Server) ListenAndServeTLS(certFile, keyFile string, serve ServeFuncti func (srv *Server) ListenAndServeTLSConfig(tlsConfig *tls.Config, serve ServeFunction) error { go srv.awaitShutdown() + tlsConfig.MinVersion = tls.VersionTLS12 + l, err := GetListener(srv.network, srv.address) if err != nil { log.Error("Unable to get Listener: %v", err)