Disable TLS 1.0 and 1.1.
Suggested by Stefan Vink of Radically Open Security.
This commit is contained in:
@@ -57,6 +57,7 @@ func Serve(address string, dataDir string) error {
|
|||||||
filepath.Join(dataDir, "key.pem"),
|
filepath.Join(dataDir, "key.pem"),
|
||||||
)
|
)
|
||||||
s.TLSConfig = &tls.Config{
|
s.TLSConfig = &tls.Config{
|
||||||
|
MinVersion: tls.VersionTLS12,
|
||||||
GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
|
GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
|
||||||
return certificate.Get()
|
return certificate.Get()
|
||||||
},
|
},
|
||||||
|
|||||||
Reference in New Issue
Block a user