Do not allow TLS versions less than 1.2 in DoH client

2019-10-07 14:55:34 +03:00 · 2019-10-07 14:55:34 +03:00 · 0a551619c9
parent b3bcce97da
commit 0a551619c9
1 changed files with 1 additions and 1 deletions
--- a/tunneldns/https_upstream.go
+++ b/tunneldns/https_upstream.go
@ -34,7 +34,7 @@ func NewUpstreamHTTPS(endpoint string) (Upstream, error) {
 	}

 	// Update TLS and HTTP client configuration
-	tls := &tls.Config{ServerName: u.Hostname()}
+	tls := &tls.Config{ServerName: u.Hostname() MinVersion: tls.VersionTLS12}
 	transport := &http.Transport{
 		TLSClientConfig:    tls,
 		DisableCompression: true,