Merge pull request #16 from brave-experiments/use-min-tls

Use TLS 1.3 as minimum acceptable TLS version.
NullHypothesis · Aug 29, 2022 · aeddcba · aeddcba
2 parents 2ea0784 + 6b7e669
commit aeddcba
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/kafkautils/kafka_utils.go b/kafkautils/kafka_utils.go
@@ -58,7 +58,10 @@ func NewKafkaWriter(certFile, keyFile string) (*kafka.Writer, error) {
 		Addr:  kafka.TCP(kafkaBroker),
 		Topic: kafkaTopic,
 		Transport: &kafka.Transport{
-			TLS: &tls.Config{Certificates: []tls.Certificate{cert}},
+			TLS: &tls.Config{
+				Certificates: []tls.Certificate{cert},
+				MinVersion:   tls.VersionTLS13,
+			},
 		},
 	}, nil
 }