use min tls 1.2 (#4969)

* use min tls 1.2 Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de> * add changelog Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de> Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-11-03 16:08:56 +01:00
parent 9fc64e5479
commit 0f7dba53fb
11 changed files with 21 additions and 3 deletions
@@ -66,7 +66,9 @@ func (m Mail) getMailClient() (*mail.SMTPClient, error) {
 	}
 	server.Password = m.conf.Notifications.SMTP.Password
 	if server.TLSConfig == nil {
-		server.TLSConfig = &tls.Config{}
+		server.TLSConfig = &tls.Config{
+			MinVersion: tls.VersionTLS12,
+		}
 	}
 	server.TLSConfig.InsecureSkipVerify = m.conf.Notifications.SMTP.Insecure

@@ -57,6 +57,7 @@ func Server(cfg *config.Config) *cli.Command {
 				}

 				tlsConf = &tls.Config{
+					MinVersion:         tls.VersionTLS12,
 					InsecureSkipVerify: evtsCfg.TLSInsecure, //nolint:gosec
 					RootCAs:            rootCAPool,
 				}