use TLSv1.3

DENICeG · Jul 27, 2020 · 4006064 · 4006064
1 parent 749a45f
commit 4006064
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/pkg/rri/client.go b/pkg/rri/client.go
@@ -31,12 +31,14 @@ type Client struct {
 
 // NewClient returns a new Client object for the given RRI Server.
 func NewClient(address string) (*Client, error) {
+
+	isMockEnv := (address == "localhost:31298")
+
 	client := &Client{
 		address: address,
 		tlsConfig: &tls.Config{
-			MinVersion:         tls.VersionSSL30,
-			CipherSuites:       []uint16{tls.TLS_RSA_WITH_AES_128_CBC_SHA},
-			InsecureSkipVerify: true,
+			MinVersion:         tls.VersionTLS13,
+			InsecureSkipVerify: isMockEnv,
 		},
 		XMLMode:              false,
 		AutoNormalizeHandles: true,

diff --git a/pkg/rri/server_test.go b/pkg/rri/server_test.go
@@ -36,8 +36,7 @@ func TestServer(t *testing.T) {
 
 	client := &Client{address: fmt.Sprintf("localhost:%d", port)}
 	client.tlsConfig = &tls.Config{
-		MinVersion:         tls.VersionSSL30,
-		CipherSuites:       []uint16{tls.TLS_RSA_WITH_AES_128_CBC_SHA},
+		MinVersion:         tls.VersionTLS13,
 		InsecureSkipVerify: true,
 	}