Merge pull request #498 from GeorgianaElena/tls_version

Set tls 1.2 to be the min version
This commit is contained in:
Yuvi Panda
2020-01-31 12:41:00 -08:00
committed by GitHub
2 changed files with 3 additions and 1 deletions

View File

@@ -69,7 +69,7 @@ def test_letsencrypt_config(tljh_dir):
assert cfg["entryPoints"] == { assert cfg["entryPoints"] == {
"http": {"address": ":80", "redirect": {"entryPoint": "https"}}, "http": {"address": ":80", "redirect": {"entryPoint": "https"}},
"https": {"address": ":443", "tls": {}}, "https": {"address": ":443", "tls": {"minVersion": "VersionTLS12"}},
"auth_api": { "auth_api": {
"address": "127.0.0.1:8099", "address": "127.0.0.1:8099",
"auth": { "auth": {
@@ -110,6 +110,7 @@ def test_manual_ssl_config(tljh_dir):
"https": { "https": {
"address": ":443", "address": ":443",
"tls": { "tls": {
"minVersion": "VersionTLS12",
"certificates": [ "certificates": [
{"certFile": "/path/to/ssl.cert", "keyFile": "/path/to/ssl.key"} {"certFile": "/path/to/ssl.cert", "keyFile": "/path/to/ssl.key"}
] ]

View File

@@ -34,6 +34,7 @@ idleTimeout = "10m0s"
[entryPoints.https] [entryPoints.https]
address = ":{{https['port']}}" address = ":{{https['port']}}"
[entryPoints.https.tls] [entryPoints.https.tls]
minVersion = "VersionTLS12"
{% if https['tls']['cert'] %} {% if https['tls']['cert'] %}
[[entryPoints.https.tls.certificates]] [[entryPoints.https.tls.certificates]]
certFile = "{{https['tls']['cert']}}" certFile = "{{https['tls']['cert']}}"