Disable TLS 1.0 and 1.1.

Suggested by Stefan Vink of Radically Open Security.
2025-01-20 17:36:18 +01:00
parent 910b60f3c4
commit df71f66fdf
1 changed files with 1 additions and 0 deletions
@@ -57,6 +57,7 @@ func Serve(address string, dataDir string) error {
 			filepath.Join(dataDir, "key.pem"),
 		)
 		s.TLSConfig = &tls.Config{
+			MinVersion: tls.VersionTLS12,
 			GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
 				return certificate.Get()
 			},