Remove TLS1.0/1.1 support. Resolves #3914 (#3916)

microsoft · May 1, 2024 · c8e5ed3 · c8e5ed3
1 parent cb59c99
commit c8e5ed3
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,6 +9,7 @@ ENHANCEMENTS:
 
 BUG FIXES:
 * Update to Resource Processor Image, now using Ubuntu 22.04 (jammy). Part of ([#3523](https://github.com/microsoft/AzureTRE/issues/3523))
+* Remove TLS1.0/1.1 support from Application Gateway
 
 COMPONENTS:
 

diff --git a/core/terraform/appgateway/appgateway.tf b/core/terraform/appgateway/appgateway.tf
@@ -65,6 +65,12 @@ resource "azurerm_application_gateway" "agw" {
     key_vault_secret_id = azurerm_key_vault_certificate.tlscert.secret_id
   }
 
+  # SSL policy
+  ssl_policy {
+    policy_type = "Predefined"
+    policy_name = "AppGwSslPolicy20220101"
+  }
+
   # Backend pool with the static website in storage account.
   backend_address_pool {
     name  = local.staticweb_backend_pool_name

diff --git a/core/version.txt b/core/version.txt
@@ -1 +1 @@
-__version__ = "0.9.8"
+__version__ = "0.9.9"