From a8bbfd71223a8633d99fed527b446b94ccd62ad2 Mon Sep 17 00:00:00 2001
From: Eguzki Astiz Lezaun <eastizle@redhat.com>
Date: Fri, 31 Mar 2023 13:54:53 +0200
Subject: [PATCH] THREESCALE-9193 upstream through a proxy that require TLS
 v1.3

---
 gateway/http.d/ssl.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gateway/http.d/ssl.conf b/gateway/http.d/ssl.conf
index d7248fe26..782f1ec54 100644
--- a/gateway/http.d/ssl.conf
+++ b/gateway/http.d/ssl.conf
@@ -10,6 +10,7 @@
 # at most 100 intermediate CA certificates and a final trust anchor certificate.
 lua_ssl_verify_depth 100;
 lua_ssl_trusted_certificate "{{ ca_bundle | default: 'ca-bundle.crt' }}";
+lua_ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
 
 proxy_ssl_server_name on;
 proxy_ssl_name $http_host;