55 lines
1.2 KiB
Plaintext
55 lines
1.2 KiB
Plaintext
|
|
||
|
|
include::../summary.adoc[]
|
||
|
|
|
||
|
|
== Why is this an issue?
|
||
|
|
|
||
|
|
include::../rationale.adoc[]
|
||
|
|
|
||
|
|
include::../impact.adoc[]
|
||
|
|
|
||
|
|
// How to fix it section
|
||
|
|
|
||
|
|
include::how-to-fix-it/stdlib.adoc[]
|
||
|
|
|
||
|
|
== Resources
|
||
|
|
|
||
|
|
include::../common/resources/docs.adoc[]
|
||
|
|
|
||
|
|
include::../common/resources/articles.adoc[]
|
||
|
|
|
||
|
|
* GitHub - `golang/go` - https://github.com/golang/go/issues/45428[`crypto/tls`: disable client-side TLS 1.0 and TLS 1.1]
|
||
|
|
|
||
|
|
include::../common/resources/presentations.adoc[]
|
||
|
|
|
||
|
|
include::../common/resources/standards.adoc[]
|
||
|
|
|
||
|
|
|
||
|
|
ifdef::env-github,rspecator-view[]
|
||
|
|
|
||
|
|
'''
|
||
|
|
== Implementation Specification
|
||
|
|
(visible only on this page)
|
||
|
|
|
||
|
|
=== Message
|
||
|
|
|
||
|
|
Change this code to enforce TLS 1.2 or above.
|
||
|
|
|
||
|
|
=== Highlighting
|
||
|
|
|
||
|
|
When a `tls.Config` is found:
|
||
|
|
|
||
|
|
* If the `MinProtocol` property is set, then highlight it and its incorrect value.
|
||
|
|
* If the `MinProtocol` property is not set (but defaults to TLS 1.0), then highlight the entire `tls.Config` object.
|
||
|
|
|
||
|
|
When a `tls.Config` is not found, but an `http.Server` is created (which defaults to TLS 1.0):
|
||
|
|
|
||
|
|
* Highlight the `http.Server` constructor.
|
||
|
|
|
||
|
|
'''
|
||
|
|
== Comments And Links
|
||
|
|
(visible only on this page)
|
||
|
|
|
||
|
|
include::../comments-and-links.adoc[]
|
||
|
|
|
||
|
|
endif::env-github,rspecator-view[]
|