require tls 1.2

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-10-22 10:56:04 +02:00
parent dd66ee19d1
commit 6b97c74c40
5 changed files with 11 additions and 2 deletions
@@ -81,7 +81,9 @@ func NewClient(opts ...ClientOption) (client.Client, error) {
 		}
 		cOpts = append(cOpts, mgrpcc.AuthTLS(tlsConfig))
 	case "on":
-		tlsConfig = &tls.Config{}
+		tlsConfig = &tls.Config{
+			MinVersion: tls.VersionTLS12,
+		}
 		// Note: If caCert is empty we use the system's default set of trusted CAs
 		if options.caCert != "" {
 			certs := x509.NewCertPool()