Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

security: update tls cipher suites #23551

Merged
merged 2 commits into from
Jul 11, 2024
Merged

security: update tls cipher suites #23551

merged 2 commits into from
Jul 11, 2024

Conversation

dduzgun-security
Copy link
Collaborator

@dduzgun-security dduzgun-security commented Jul 11, 2024 •
edited by jira bot
Loading

Resolves Insecure TLS configuration to prevent potential eavesdropping, tampering, or message forgery by removing support for:

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
  • TLS_RSA_WITH_AES_128_CBC_SHA256

Ref: NET-9787 and NET-9785

@dduzgun-security dduzgun-security self-assigned this Jul 11, 2024
@dduzgun-security dduzgun-security marked this pull request as ready for review July 11, 2024 17:22
@dduzgun-security dduzgun-security requested a review from tgross July 11, 2024 17:22
@dduzgun-security dduzgun-security added the theme/docs Documentation issues and enhancements label Jul 11, 2024
@tgross tgross added backport/ent/1.6.x+ent Changes are backported to 1.6.x+ent backport/ent/1.7.x+ent Changes are backported to 1.7.x+ent backport/1.8.x backport to 1.8.x release line backport/1.6.x backport to 1.6.x release line backport/1.7.x backport to 1.7.x release line labels Jul 11, 2024
tgross
tgross approved these changes Jul 11, 2024
View reviewed changes
Copy link
Member

@tgross tgross left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

I'm backporting these to the unreleased 1.6.x/1.7.x CE branches just so the docs get published too.

@tgross tgross merged commit c82dd76 into main Jul 11, 2024
39 checks passed
@tgross tgross deleted the security/update-tls-ciphers branch July 11, 2024 18:01
This was referenced Jul 11, 2024
Merged
Merged
Merged
@github-actions GitHub Actions
Copy link

I'm going to lock this pull request because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Dec 30, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@tgross tgross tgross approved these changes

Assignees

@dduzgun-security dduzgun-security

Labels
backport/ent/1.6.x+ent Changes are backported to 1.6.x+ent backport/ent/1.7.x+ent Changes are backported to 1.7.x+ent backport/1.6.x backport to 1.6.x release line backport/1.7.x backport to 1.7.x release line backport/1.8.x backport to 1.8.x release line theme/docs Documentation issues and enhancements theme/security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@dduzgun-security @tgross