particle-os/debian-forge-composer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

gosec: G402 - TLS MinVersion

Browse source 
stablish minumim TLS version, so G402 from gosec doesn't get triggered
This commit is contained in:
Juan Abia 2021-11-29 18:10:35 +01:00 • committed by Alexander Todorov
parent c8cf835db3
commit ceb72975c4
7 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
cmd/osbuild-auth-tests/main_test.go
View file

@ -42,6 +42,7 @@ func createTLSConfig(config *connectionConfig) (*tls.Config, error) {
return &tls.Config{
RootCAs: roots,
Certificates: []tls.Certificate{cert},
MinVersion: tls.VersionTLS12,
}, nil
}

1
cmd/osbuild-composer/composer.go
View file

@ -348,6 +348,7 @@ func createTLSConfig(c *connectionConfig) (*tls.Config, error) {
Certificates: []tls.Certificate{cert},
ClientAuth: c.ClientAuth,
ClientCAs: roots,
MinVersion: tls.VersionTLS12,
VerifyPeerCertificate: func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error {
for _, chain := range verifiedChains {
for _, domain := range c.AllowedDomains {

2
cmd/osbuild-koji-tests/main_test.go
View file

@ -45,6 +45,7 @@ func TestKojiRefund(t *testing.T) {
transport.TLSClientConfig = &tls.Config{
RootCAs: certPool,
MinVersion: tls.VersionTLS12,
}
// login
@ -105,6 +106,7 @@ func TestKojiImport(t *testing.T) {
transport.TLSClientConfig = &tls.Config{
RootCAs: certPool,
MinVersion: tls.VersionTLS12,
}
// login

2
cmd/osbuild-worker/jobimpl-koji-finalize.go
View file

@ -28,6 +28,7 @@ func (impl *KojiFinalizeJobImpl) kojiImport(
transport := http.DefaultTransport.(*http.Transport).Clone()
transport.TLSClientConfig = &tls.Config{
Renegotiation: tls.RenegotiateOnceAsClient,
MinVersion: tls.VersionTLS12,
}
serverURL, err := url.Parse(server)
@ -65,6 +66,7 @@ func (impl *KojiFinalizeJobImpl) kojiFail(server string, buildID int, token stri
transport := http.DefaultTransport.(*http.Transport).Clone()
transport.TLSClientConfig = &tls.Config{
Renegotiation: tls.RenegotiateOnceAsClient,
MinVersion: tls.VersionTLS12,
}
serverURL, err := url.Parse(server)

1
cmd/osbuild-worker/jobimpl-koji-init.go
View file

@ -21,6 +21,7 @@ func (impl *KojiInitJobImpl) kojiInit(server, name, version, release string) (st
transport := http.DefaultTransport.(*http.Transport).Clone()
transport.TLSClientConfig = &tls.Config{
Renegotiation: tls.RenegotiateOnceAsClient,
MinVersion: tls.VersionTLS12,
}
serverURL, err := url.Parse(server)

1
cmd/osbuild-worker/jobimpl-osbuild-koji.go
View file

@ -28,6 +28,7 @@ func (impl *OSBuildKojiJobImpl) kojiUpload(file *os.File, server, directory, fil
transport := http.DefaultTransport.(*http.Transport).Clone()
transport.TLSClientConfig = &tls.Config{
Renegotiation: tls.RenegotiateOnceAsClient,
MinVersion: tls.VersionTLS12,
}
serverURL, err := url.Parse(server)

1
cmd/osbuild-worker/main.go
View file

@ -60,6 +60,7 @@ func createTLSConfig(config *connectionConfig) (*tls.Config, error) {
return &tls.Config{
RootCAs: roots,
Certificates: certs,
MinVersion: tls.VersionTLS12,
}, nil
}