Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support TLS 1.3 #923

Merged
merged 5 commits into from
Nov 19, 2020
Merged

Support TLS 1.3 #923

merged 5 commits into from
Nov 19, 2020

Conversation

aajisaka
Copy link
Contributor

@aajisaka aajisaka commented Nov 18, 2020

Description

Set "tls.MaxVersion = tls.VersionTLS13" to use TLS 1.3 if possible.

Motivation and Context

Now the TLS version is hard-coded and it does not support TLS 1.3.

How Has This Been Tested?

Manually tested. I compiled and deployed in CentOS 7 and ran curl command.

% curl -i -v https://<hostname>:<port> --tlsv1.3

Checklist:

  • My change requires a change to the documentation or CHANGELOG.
  • I have updated the documentation/CHANGELOG accordingly.
  • I have created a feature (non-master) branch for my PR.

@aajisaka aajisaka requested a review from a team as a code owner November 18, 2020 06:54
@aajisaka
Copy link
Contributor Author

Oh, I saw #833 after opening the PR.

@JoelSpeed
Copy link
Member

Please add a note to the changelog mentioning this change and I'm happy to get this merged

@aajisaka
Copy link
Contributor Author

Thank you @JoelSpeed for your review. Added a note to the changelog.

BTW, I found an existing typo oauth2-rpoxy/pull/911 in the changelog. Should I fix this in this PR?

@NickMeves
Copy link
Member

Thank you @JoelSpeed for your review. Added a note to the changelog.

BTW, I found an existing typo oauth2-rpoxy/pull/911 in the changelog. Should I fix this in this PR?

Go for it - Thanks!

Copy link
Member

@JoelSpeed JoelSpeed left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@JoelSpeed JoelSpeed merged commit ed92df3 into oauth2-proxy:master Nov 19, 2020
@aajisaka aajisaka deleted the tls13 branch November 19, 2020 11:35
@aajisaka
Copy link
Contributor Author

Thank you @JoelSpeed and @NickMeves !

k-jell pushed a commit to liquidinvestigations/oauth2-proxy that referenced this pull request Apr 6, 2022
* Support TLS 1.3

* Set TLS 1.3 explicitly to fix gosec warning.

* Add an entry to changelog.

* Fix typo in the changelog.

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants