Mirrors/kararas_iris
1
0
Fork 0
mirror of https://github.com/kataras/iris.git synced 2026-01-09 13:05:56 +00:00
Code Releases Activity

As the default value is TLS 1.0, which is considered insecure, it is recommended to explicitly set the MinVersion to a secure version of TLS

Browse Source
This commit is contained in:
Gerasimos (Makis) Maropoulos
2022-03-06 19:43:09 +02:00
parent 410e5eae83
commit a5c43f1d9d
5 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
core/host/proxy.go
View File

@@ -22,7 +22,7 @@ import (
// Look `ProxyHandlerRemote` too.
func ProxyHandler(target *url.URL, config *tls.Config) *httputil.ReverseProxy {
if config == nil {
config = &tls.Config{}
config = &tls.Config{MinVersion: tls.VersionTLS11}
}
director := func(req *http.Request) {
@@ -89,7 +89,7 @@ func modifyProxiedRequest(req *http.Request, target *url.URL) {
// Look `ProxyHandler` too.
func ProxyHandlerRemote(target *url.URL, config *tls.Config) *httputil.ReverseProxy {
if config == nil {
config = &tls.Config{}
config = &tls.Config{MinVersion: tls.VersionTLS11}
}
director := func(req *http.Request) {

1
core/host/proxy_test.go
View File

@@ -27,6 +27,7 @@ func TestProxy(t *testing.T) {
config := &tls.Config{
InsecureSkipVerify: true,
MinVersion: tls.VersionTLS11,
MaxVersion: tls.VersionTLS12,
}
proxy := host.NewProxy("", u, config)

2
core/host/supervisor_test.go
View File

@@ -25,7 +25,7 @@ func newTester(t *testing.T, baseURL string, handler http.Handler) *httpexpect.E
if strings.HasPrefix(baseURL, "http") { // means we are testing real serve time
transporter = &http.Transport{
TLSClientConfig: &tls.Config{InsecureSkipVerify: true},
TLSClientConfig: &tls.Config{InsecureSkipVerify: true, MinVersion: tls.VersionTLS11},
}
} else { // means we are testing the handler itself
transporter = httpexpect.NewBinder(handler)