1
0
Fork 0
mirror of https://github.com/documize/community.git synced 2025-07-19 13:19:43 +02:00

Enforce TLS 1.2 minimum

This commit is contained in:
HarveyKandola 2021-03-16 13:58:27 -04:00
parent 66fcb77d8b
commit adb7b4d7bf
5 changed files with 1081 additions and 1031 deletions

View file

@ -12,6 +12,7 @@
package server
import (
"crypto/tls"
"fmt"
"net/http"
"strings"
@ -122,7 +123,11 @@ func Start(rt *env.Runtime, s *store.Store, ready chan struct{}) {
rt.Log.Info("Web Server: starting SSL server on " + rt.Flags.HTTPPort + " with " + rt.Flags.SSLCertFile + " " + rt.Flags.SSLKeyFile)
server := &http.Server{Addr: ":" + rt.Flags.HTTPPort, Handler: n /*, TLSConfig: myTLSConfig*/}
cfg := &tls.Config{
MinVersion: tls.VersionTLS12,
}
server := &http.Server{Addr: ":" + rt.Flags.HTTPPort, Handler: n, TLSConfig: cfg}
server.SetKeepAlivesEnabled(true)
if err := server.ListenAndServeTLS(rt.Flags.SSLCertFile, rt.Flags.SSLKeyFile); err != nil {