config: update minimum TLS version for server

crozzy · crozzy · commit 33a7743867d9 · 2024-01-05T14:21:08.000-08:00
The config is used both when setting up the HTTP API and
for the notifier's Deliverer.

Signed-off-by: crozzy &lt;joseph.crosland@gmail.com&gt;
diff --git a/config/tls.go b/config/tls.go
@@ -58,6 +58,7 @@ func (t *TLS) Config() (*tls.Config, error) {
 		return nil, fmt.Errorf("failed to read x509 cert and key pair: %w", err)
 	}
 	cfg.Certificates = append(cfg.Certificates, cert)
+	cfg.MinVersion = tls.VersionTLS12
 
 	return &cfg, nil
 }

Original file line number	Diff line number	Diff line change
`@@ -58,6 +58,7 @@ func (t TLS) Config() (tls.Config, error) {`
`58`	`58`	`return nil, fmt.Errorf("failed to read x509 cert and key pair: %w", err)`
`59`	`59`	`}`
`60`	`60`	`cfg.Certificates = append(cfg.Certificates, cert)`
	`61`	`+ cfg.MinVersion = tls.VersionTLS12`
`61`	`62`
`62`	`63`	`return &cfg, nil`
`63`	`64`	`}`