*: set default tls.MinVersion as tls.VersionTLS10 (#1088)

Signed-off-by: Weizhen Wang <wangweizhen@pingcap.com>
Co-authored-by: disksing <i@disksing.com>
This commit is contained in:
Weizhen Wang 2023-12-25 10:10:32 +08:00 committed by GitHub
parent db2e85c463
commit 85e66083bc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions

View File

@ -77,8 +77,9 @@ func (s *Security) ToTLSConfig() (tlsConfig *tls.Config, err error) {
return
}
tlsConfig = &tls.Config{
RootCAs: certPool,
ClientCAs: certPool,
RootCAs: certPool,
ClientCAs: certPool,
MinVersion: tls.VersionTLS10,
}
if len(s.ClusterSSLCert) != 0 && len(s.ClusterSSLKey) != 0 {