util: Use TLSv1.2 as minimum TLS version by default (pingcap#36037)

close pingcap#36036
AilinKid · Jan 17, 2024 · ed412df · ed412df
1 parent 426bab2
commit ed412df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/util/misc.go b/pkg/util/misc.go
@@ -485,7 +485,7 @@ func LoadTLSCertificates(ca, key, cert string, autoTLS bool, rsaKeySize int) (tl
 
 	requireTLS := tlsutil.RequireSecureTransport.Load()
 
-	var minTLSVersion uint16 = tls.VersionTLS11
+	var minTLSVersion uint16 = tls.VersionTLS12
 	switch tlsver := config.GetGlobalConfig().Security.MinTLSVersion; tlsver {
 	case "TLSv1.0":
 		minTLSVersion = tls.VersionTLS10