Skip to content

Commit cd89466

Browse files
committed
mgr/dashboard: force TLS 1.3
Fixes: https://tracker.ceph.com/issues/58942 Signed-off-by: Ernesto Puerta <[email protected]>
1 parent 950a61a commit cd89466

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/pybind/mgr/dashboard/module.py

+2-2
Original file line numberDiff line numberDiff line change
@@ -178,9 +178,9 @@ def _configure(self):
178178
context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
179179
context.load_cert_chain(cert_fname, pkey_fname)
180180
if sys.version_info >= (3, 7):
181-
context.minimum_version = ssl.TLSVersion.TLSv1_2
181+
context.minimum_version = ssl.TLSVersion.TLSv1_3
182182
else:
183-
context.options |= ssl.OP_NO_TLSv1 | ssl.OP_NO_TLSv1_1
183+
context.options |= ssl.OP_NO_TLSv1 | ssl.OP_NO_TLSv1_1 | ssl.OP_NO_TLSv1_2
184184

185185
config['server.ssl_module'] = 'builtin'
186186
config['server.ssl_certificate'] = cert_fname

0 commit comments

Comments
 (0)