From 2941626b7d299c563e7bee510fc14d3c1bdf16f8 Mon Sep 17 00:00:00 2001 From: Alexander Yastrebov Date: Tue, 29 Oct 2024 14:46:35 +0100 Subject: [PATCH] skipper: set server minimal TLS version (#3282) The tls-min-version flag specifies "minimal TLS Version to be used in server, proxy and client connections" but was not used to configure Server TLS. Follow up on: #1656 Signed-off-by: Alexander Yastrebov --- config/config.go | 1 + 1 file changed, 1 insertion(+) diff --git a/config/config.go b/config/config.go index ca22edfe35..0ed251200c 100644 --- a/config/config.go +++ b/config/config.go @@ -732,6 +732,7 @@ func (c *Config) ToOptions() skipper.Options { CertPathTLS: c.CertPathTLS, KeyPathTLS: c.KeyPathTLS, TLSClientAuth: c.TLSClientAuth, + TLSMinVersion: c.getMinTLSVersion(), CipherSuites: c.filterCipherSuites(), MaxLoopbacks: c.MaxLoopbacks, DefaultHTTPStatus: c.DefaultHTTPStatus,