mirror of
https://github.com/vmware-tanzu/pinniped.git
synced 2026-01-03 11:45:45 +00:00
revert the disabling of http2 for the Supervisor OIDC endpoints
Due to the unintended consequence of potentially breaking Ingresses which were configured to use http2 on their backends.
This commit is contained in:
@@ -531,10 +531,6 @@ func runSupervisor(ctx context.Context, podInfo *downward.PodInfo, cfg *supervis
|
||||
}
|
||||
|
||||
c := ptls.Default(nil)
|
||||
// Remove "h2" from the list for now, until we have a better idea of how to mitigate
|
||||
// potential http2 rapid reset vulnerabilities. This disables serving requests using http2.
|
||||
c.NextProtos = []string{"http/1.1"}
|
||||
|
||||
c.GetCertificate = func(info *tls.ClientHelloInfo) (*tls.Certificate, error) {
|
||||
cert := dynamicTLSCertProvider.GetTLSCert(strings.ToLower(info.ServerName))
|
||||
foundServerNameCert := cert != nil
|
||||
|
||||
Reference in New Issue
Block a user