Merge pull request #8588 from dqminh/remove-sslv3

remove sslv3 from server's TLS supported versions
2026-10-04 15:58:39 +00:00 · 2014-10-17 12:05:48 -04:00
parent 6ce4f82ebe 7a062b2b8f
commit 10f78974ca
3 changed files with 9 additions and 1 deletions
@@ -1439,6 +1439,8 @@ func ListenAndServe(proto, addr string, job *engine.Job) error {
 		tlsConfig := &tls.Config{
 			NextProtos:   []string{"http/1.1"},
 			Certificates: []tls.Certificate{cert},
+			// Avoid fallback on insecure SSL protocols
+			MinVersion: tls.VersionTLS10,
 		}
 		if job.GetenvBool("TlsVerify") {
 			certPool := x509.NewCertPool()