diff --git a/cmd/interceptors/main.go b/cmd/interceptors/main.go index 1048ac74c..4c112bcfd 100644 --- a/cmd/interceptors/main.go +++ b/cmd/interceptors/main.go @@ -107,7 +107,7 @@ func startServer(ctx context.Context, stop <-chan struct{}, mux *http.ServeMux, IdleTimeout: idleTimeout, Handler: mux, TLSConfig: &tls.Config{ - MinVersion: tls.VersionTLS13, + MinVersion: tls.VersionTLS12, GetCertificate: func(*tls.ClientHelloInfo) (*tls.Certificate, error) { return server.GetTLSData(ctx, logger) }, diff --git a/config/interceptors/interceptor-secrets.yaml b/config/interceptors/00-interceptor-secrets.yaml similarity index 100% rename from config/interceptors/interceptor-secrets.yaml rename to config/interceptors/00-interceptor-secrets.yaml diff --git a/pkg/adapter/adapter.go b/pkg/adapter/adapter.go index fcad0611f..6f44adb64 100644 --- a/pkg/adapter/adapter.go +++ b/pkg/adapter/adapter.go @@ -128,7 +128,7 @@ func (s *sinker) getHTTPClient() (*http.Client, error) { tlsConfig = &tls.Config{ RootCAs: certPool, - MinVersion: tls.VersionTLS13, // Added MinVersion to avoid G402: TLS MinVersion too low. (gosec) + MinVersion: tls.VersionTLS12, // Added MinVersion to avoid G402: TLS MinVersion too low. (gosec) } return &http.Client{ Transport: &http.Transport{