mirror of
https://github.com/documize/community.git
synced 2025-07-19 13:19:43 +02:00
Enforce TLS 1.2 minimum
This commit is contained in:
parent
66fcb77d8b
commit
adb7b4d7bf
5 changed files with 1081 additions and 1031 deletions
|
@ -12,6 +12,7 @@
|
|||
package server
|
||||
|
||||
import (
|
||||
"crypto/tls"
|
||||
"fmt"
|
||||
"net/http"
|
||||
"strings"
|
||||
|
@ -122,7 +123,11 @@ func Start(rt *env.Runtime, s *store.Store, ready chan struct{}) {
|
|||
|
||||
rt.Log.Info("Web Server: starting SSL server on " + rt.Flags.HTTPPort + " with " + rt.Flags.SSLCertFile + " " + rt.Flags.SSLKeyFile)
|
||||
|
||||
server := &http.Server{Addr: ":" + rt.Flags.HTTPPort, Handler: n /*, TLSConfig: myTLSConfig*/}
|
||||
cfg := &tls.Config{
|
||||
MinVersion: tls.VersionTLS12,
|
||||
}
|
||||
|
||||
server := &http.Server{Addr: ":" + rt.Flags.HTTPPort, Handler: n, TLSConfig: cfg}
|
||||
server.SetKeepAlivesEnabled(true)
|
||||
|
||||
if err := server.ListenAndServeTLS(rt.Flags.SSLCertFile, rt.Flags.SSLKeyFile); err != nil {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue