From 17fcf2158afee17688f7e9c3e36974f21509aff9 Mon Sep 17 00:00:00 2001
From: Kiran Pachhai <kiran.pachhai@gmail.com>
Date: Fri, 13 Dec 2024 11:16:24 -0500
Subject: [PATCH] Set min TLS version to 1.2

---
 extension/externalsubscriber/client.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/extension/externalsubscriber/client.go b/extension/externalsubscriber/client.go
index ad29412..fb2fe85 100644
--- a/extension/externalsubscriber/client.go
+++ b/extension/externalsubscriber/client.go
@@ -43,7 +43,9 @@ func NewExternalSubscriberClient(
 	var opts []grpc.DialOption
 	if useTLS {
 		// Use default TLS credentials
-		creds := credentials.NewTLS(&tls.Config{})
+		creds := credentials.NewTLS(&tls.Config{
+			MinVersion: tls.VersionTLS12, // Ensure a secure minimum TLS version
+		})
 		opts = append(opts, grpc.WithTransportCredentials(creds))
 	} else {
 		// Use insecure credentials for plaintext communication