[GitHub] [trafficcontrol] hbeatty commented on issue #3764: Specify TLS version support in Traffic Router server.xml

[GitBox <gi...@apache.org>]

hbeatty commented on issue #3764: Specify TLS version support in Traffic Router server.xml
URL: https://github.com/apache/trafficcontrol/issues/3764#issuecomment-520539938
 
 
   We changed this:
   
   https://github.com/apache/trafficcontrol/blob/2e6a6797d55ca28310d0c5eb1be5ec592dcc595f/traffic_router/connector/src/main/java/com/comcast/cdn/traffic_control/traffic_router/protocol/RouterNioEndpoint.java#L68
   
   to:
   
   `sslHostConfig.setProtocols("TLSv1.2");`
   
   Then using the docker statement above we verified that only TLSv1.2 was offered:
   
   ```
    Testing protocols via sockets except NPN+ALPN 
   
    SSLv2      not offered (OK)
    SSLv3      not offered (OK)
    TLS 1      not offered
    TLS 1.1    not offered
    TLS 1.2    offered (OK)
    TLS 1.3    not offered
    NPN/SPDY   not offered
    ALPN/HTTP2 not offered
   ```
   
   We need to find a way to access the enabled protocols that have to be in a variable already from server.xml

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services