From b3a27c3f3a0af7300f563df4f52fa9880d161335 Mon Sep 17 00:00:00 2001 From: Alexander Yastrebov Date: Sat, 19 Oct 2024 10:14:27 +0200 Subject: [PATCH] skipper: set server minimal TLS version The tls-min-version flag specifies "minimal TLS Version to be used in server, proxy and client connections" but was not used to configure Server TLS. Follow up on: #1656 Signed-off-by: Alexander Yastrebov --- config/config.go | 1 + 1 file changed, 1 insertion(+) diff --git a/config/config.go b/config/config.go index aaaf4f45c0..86a33f67cb 100644 --- a/config/config.go +++ b/config/config.go @@ -727,6 +727,7 @@ func (c *Config) ToOptions() skipper.Options { DebugListener: c.DebugListener, CertPathTLS: c.CertPathTLS, KeyPathTLS: c.KeyPathTLS, + TLSMinVersion: c.getMinTLSVersion(), CipherSuites: c.filterCipherSuites(), MaxLoopbacks: c.MaxLoopbacks, DefaultHTTPStatus: c.DefaultHTTPStatus,