feat: require TLS v1.3 at minimum (#906)

GoogleCloudPlatform · Aug 24, 2021 · cafa966 · cafa966
1 parent 0a9fd73
commit cafa966
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/proxy/proxy/client.go b/proxy/proxy/client.go
@@ -227,6 +227,7 @@ func (c *Client) refreshCfg(instance string) (addr string, cfg *tls.Config, vers
 		// that will verify that the certificate is OK.
 		InsecureSkipVerify:    true,
 		VerifyPeerCertificate: genVerifyPeerCertificateFunc(name, certs),
+		MinVersion:            tls.VersionTLS13,
 	}
 
 	return fmt.Sprintf("%s:%d", addr, c.Port), cfg, version, nil