Make TLS 1.3 the default minimum.

Admins can still downgrade to 1.2 if they need to. Most should not need to.
This commit is contained in:
Jay Lee
2022-01-02 14:38:27 -05:00
committed by GitHub
parent a9f0e5ba16
commit c3ddeae3f3

View File

@@ -1291,7 +1291,7 @@ GC_TLS_MAX_VERSION = 'tls_max_ver'
# Path to certificate authority file for validating TLS hosts
GC_CA_FILE = 'ca_file'
TLS_MIN = 'TLSv1_2' if hasattr(ssl.SSLContext(), 'minimum_version') else None
TLS_MIN = 'TLSv1_3' if hasattr(ssl.SSLContext(), 'minimum_version') else None
GC_Defaults = {
GC_ADMIN_EMAIL: '',
GC_AUTO_BATCH_MIN: 0,