From 1fd589dbf2775a60140343784383bfb4e915b2c8 Mon Sep 17 00:00:00 2001
From: Weizhen Wang <wangweizhen@pingcap.com>
Date: Tue, 16 Jan 2024 12:05:09 +0800
Subject: [PATCH] Change MinTLSVersion to TLSv1.2 (#1116)

Signed-off-by: Weizhen Wang <wangweizhen@pingcap.com>
---
 config/security.go | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/config/security.go b/config/security.go
index dc975293..835f3f8c 100644
--- a/config/security.go
+++ b/config/security.go
@@ -77,9 +77,8 @@ func (s *Security) ToTLSConfig() (tlsConfig *tls.Config, err error) {
 			return
 		}
 		tlsConfig = &tls.Config{
-			RootCAs:    certPool,
-			ClientCAs:  certPool,
-			MinVersion: tls.VersionTLS10,
+			RootCAs:   certPool,
+			ClientCAs: certPool,
 		}
 
 		if len(s.ClusterSSLCert) != 0 && len(s.ClusterSSLKey) != 0 {