mirror of
https://github.com/cloudflare/cloudflared.git
synced 2025-07-27 23:19:58 +00:00
TUN-5612: Add support for specifying TLS min/max version
This commit is contained in:
@@ -19,6 +19,8 @@ type TLSParameters struct {
|
|||||||
RootCAs []string
|
RootCAs []string
|
||||||
ServerName string
|
ServerName string
|
||||||
CurvePreferences []tls.CurveID
|
CurvePreferences []tls.CurveID
|
||||||
|
minVersion uint16 // min tls version. If zero, TLS1.0 is defined as minimum.
|
||||||
|
maxVersion uint16 // max tls version. If zero, last TLS version is used defined as limit (currently TLS1.3)
|
||||||
}
|
}
|
||||||
|
|
||||||
// GetConfig returns a TLS configuration according to the Config set by the user.
|
// GetConfig returns a TLS configuration according to the Config set by the user.
|
||||||
@@ -72,6 +74,9 @@ func GetConfig(p *TLSParameters) (*tls.Config, error) {
|
|||||||
tlsconfig.CurvePreferences = []tls.CurveID{tls.CurveP256}
|
tlsconfig.CurvePreferences = []tls.CurveID{tls.CurveP256}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
tlsconfig.MinVersion = p.minVersion
|
||||||
|
tlsconfig.MaxVersion = p.maxVersion
|
||||||
|
|
||||||
return tlsconfig, nil
|
return tlsconfig, nil
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user