Set min TLS version to 1.2

Nuklai · Dec 13, 2024 · 17fcf21 · 17fcf21
1 parent b17fd29
commit 17fcf21
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/extension/externalsubscriber/client.go b/extension/externalsubscriber/client.go
@@ -43,7 +43,9 @@ func NewExternalSubscriberClient(
 	var opts []grpc.DialOption
 	if useTLS {
 		// Use default TLS credentials
-		creds := credentials.NewTLS(&tls.Config{})
+		creds := credentials.NewTLS(&tls.Config{
+			MinVersion: tls.VersionTLS12, // Ensure a secure minimum TLS version
+		})
 		opts = append(opts, grpc.WithTransportCredentials(creds))
 	} else {
 		// Use insecure credentials for plaintext communication