diff --git a/CHANGELOG.md b/CHANGELOG.md index 5176e22f..3922c2a3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,15 @@ # Changelog +## [unreleased]((https://github.com/NodeFactoryIo/vedran/tree/HEAD)) +[Full Changelog](https://github.com/NodeFactoryIo/vedran/compare/v0.4.2...HEAD) + +### Added + +### Fix +- Fix min TLS version [\#175](https://github.com/NodeFactoryIo/vedran/pull/175) ([MakMuftic](https://github.com/MakMuftic)) + +### Changed + ## [v0.4.3]((https://github.com/NodeFactoryIo/vedran/tree/v0.4.3)) [Full Changelog](https://github.com/NodeFactoryIo/vedran/compare/v0.4.2...v0.4.3\) diff --git a/internal/loadbalancer/server.go b/internal/loadbalancer/server.go index 54a07904..70da00f8 100644 --- a/internal/loadbalancer/server.go +++ b/internal/loadbalancer/server.go @@ -1,6 +1,7 @@ package loadbalancer import ( + "crypto/tls" "fmt" "net/http" "path" @@ -99,12 +100,13 @@ func StartLoadBalancerServer( r := router.CreateNewApiRouter(apiController, privateKey) prometheus.RecordMetrics(*repos) if props.CertFile != "" { - err = http.ListenAndServeTLS( - fmt.Sprintf(":%d", props.Port), - props.CertFile, - props.KeyFile, - handlers.CORS()(r), - ) + tlsConfig := &tls.Config{MinVersion: tls.VersionTLS10} + server := &http.Server{ + Addr: fmt.Sprintf(":%d", props.Port), + Handler: handlers.CORS()(r), + TLSConfig: tlsConfig, + } + err = server.ListenAndServeTLS(props.CertFile, props.KeyFile) } else { err = http.ListenAndServe(fmt.Sprintf(":%d", props.Port), handlers.CORS()(r)) }