Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enforce supported TLS versions #22

Merged
merged 1 commit into from
Nov 19, 2023
Merged

Enforce supported TLS versions #22

merged 1 commit into from
Nov 19, 2023

Conversation

andreaso
Copy link
Owner

@andreaso andreaso commented Nov 19, 2023

  • https://api.github.com/ supports TLS version 1.3. Likewise can be assumed of any reasonably up-to-date Vault server.
  • GitHub's ACTIONS_ID_TOKEN_REQUEST_URL endpoint appear to still only support TLS version 1.2.

Do note that these curl options only enforces a minium version. Newer TLS versions will still be allowed and preferred.

@andreaso andreaso force-pushed the enforce-tls-13 branch 2 times, most recently from 7116c0f to 176781b Compare November 19, 2023 07:24
* https://api.github.com/ supports TLS version 1.3. Likewise can be
  assumed of any reasonably up-to-date Vault server.
* GitHub's `ACTIONS_ID_TOKEN_REQUEST_URL` endpoint appear to still
  only support TLS version 1.2.

Do note that these curl options only enforces a minium version. Newer
TLS versions will still be allowed and preferred.
@andreaso andreaso changed the title Enforce TLS 1.3 Enforce supported TLS versions Nov 19, 2023
@andreaso andreaso merged commit 34d388a into main Nov 19, 2023
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant