Allow tls renegotiation once

SAP · Mar 25, 2024 · 9945f6b · 9945f6b
1 parent 67a5c56
commit 9945f6b
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/httpclient/httpclient.go b/httpclient/httpclient.go
@@ -41,9 +41,10 @@ func DefaultTLSConfig(identity env.Identity) (*tls.Config, error) {
 		return nil, errors.New("error adding certs to pool for DefaultTLSConfig")
 	}
 	tlsConfig := &tls.Config{
-		MinVersion:   tls.VersionTLS12,
-		RootCAs:      tlsCertPool,
-		Certificates: []tls.Certificate{tlsCert},
+		MinVersion:    tls.VersionTLS12,
+		RootCAs:       tlsCertPool,
+		Certificates:  []tls.Certificate{tlsCert},
+		Renegotiation: tls.RenegotiateOnceAsClient,
 	}
 	return tlsConfig, nil
 }