mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-09-17 15:13:08 +00:00
Bump minimum TLS version from SSLv3 to TLSv1.0
This commit is contained in:
@@ -68,6 +68,8 @@ func NewClientCertTLSTransport(certFile, keyFile, caFile string) (*http.Transpor
|
||||
certPool.AppendCertsFromPEM(data)
|
||||
return &http.Transport{
|
||||
TLSClientConfig: &tls.Config{
|
||||
// Change default from SSLv3 to TLSv1.0 (because of POODLE vulnerability)
|
||||
MinVersion: tls.VersionTLS10,
|
||||
Certificates: []tls.Certificate{
|
||||
cert,
|
||||
},
|
||||
|
Reference in New Issue
Block a user