mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-09-19 22:44:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

allow both TLS v1.2 and v1.3 in fips mode, supported starting in Go 1.24

Browse Source
This commit is contained in:
Ryan Richard
2025-02-18 10:46:59 -08:00
parent c90637398d
commit 8cfc1c08ec
3 changed files with 13 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/crypto/ptls/default_profile_max_tls_version_for_fips_default_value.go
+2 -2
View File
@@ -1,4 +1,4 @@
// Copyright 2024 the Pinniped contributors. All Rights Reserved.
// Copyright 2024-2025 the Pinniped contributors. All Rights Reserved.
// SPDX-License-Identifier: Apache-2.0
//go:build !fips_enable_tls13_max_for_default_profile
@@ -7,4 +7,4 @@ package ptls
import "crypto/tls"
const DefaultProfileMaxTLSVersionForFIPS = tls.VersionTLS12
const DefaultProfileMaxTLSVersionForFIPS = tls.VersionTLS13 // Starting in Go 1.24, boringcrypto supports TLS 1.3 by default, so this build tag is no longer needed