mirror of
https://github.com/kaspanet/kaspad.git
synced 2025-06-06 22:26:47 +00:00
Require TLS 1.2 minimum.
This prevents a downgrade attack to the vulnerable SSLv3. While here, go ahead and require at least TLS 1.2 since TLS 1.0 and 1.1 have their own set of issues and it's only a matter of time before those would need to be completely avoided as well. ok @davecgh
This commit is contained in:
parent
1c4ac4426c
commit
1d0c09a852
@ -539,6 +539,7 @@ func newRPCServer(listenAddrs []string, s *server) (*rpcServer, error) {
|
|||||||
|
|
||||||
tlsConfig := tls.Config{
|
tlsConfig := tls.Config{
|
||||||
Certificates: []tls.Certificate{keypair},
|
Certificates: []tls.Certificate{keypair},
|
||||||
|
MinVersion: tls.VersionTLS12,
|
||||||
}
|
}
|
||||||
|
|
||||||
// TODO(oga) this code is similar to that in server, should be
|
// TODO(oga) this code is similar to that in server, should be
|
||||||
|
Loading…
x
Reference in New Issue
Block a user