Require TLS 1.2 minimum.

This prevents a downgrade attack to the vulnerable SSLv3.  While here,
go ahead and require at least TLS 1.2 since TLS 1.0 and 1.1 have their
own set of issues and it's only a matter of time before those would
need to be completely avoided as well.

ok @davecgh
This commit is contained in:
Josh Rickmar 2014-12-15 13:44:19 -05:00
parent 1c4ac4426c
commit 1d0c09a852

View File

@ -539,6 +539,7 @@ func newRPCServer(listenAddrs []string, s *server) (*rpcServer, error) {
tlsConfig := tls.Config{
Certificates: []tls.Certificate{keypair},
MinVersion: tls.VersionTLS12,
}
// TODO(oga) this code is similar to that in server, should be