git.iko.soy/typeable/oauth2-proxy
on master help sign in
Support TLS 1.3 (#923)

* Support TLS 1.3 * Set TLS 1.3 explicitly to fix gosec warning. * Add an entry to changelog. * Fix typo in the changelog. Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

commited92df353751f481c50bde86af84a6aa53bb2144 authorAkira Ajisaka <aajisaka@apache.org> dateThu 19 Nov 2020, 19:25 (6 years ago) parent430355b
2 files changed+4−3
compare with master
unifiedsplit
CHANGELOG.md+3−2 http.go+1−1
CHANGELOG.md+3−2
@@ -22,7 +22,7 @@
2222
2323## Breaking Changes
2424
25−- [#911](https://github.com/oauth2-proxy/oauth2-rpoxy/pull/911) Specifying a non-existent provider will cause OAuth2-Proxy to fail on startup instead of defaulting to "google".
25+- [#911](https://github.com/oauth2-proxy/oauth2-proxy/pull/911) Specifying a non-existent provider will cause OAuth2-Proxy to fail on startup instead of defaulting to "google".
2626- [#797](https://github.com/oauth2-proxy/oauth2-proxy/pull/797) Security changes to Google provider group authorization flow
2727 - If you change the list of allowed groups, existing sessions that now don't have a valid group will be logged out immediately.
2828 - Previously, group membership was only checked on session creation and refresh.
@@ -43,8 +43,9 @@
4343
4444## Changes since v6.1.1
4545
46+- [#923](https://github.com/oauth2-proxy/oauth2-proxy/pull/923) Support TLS 1.3 (@aajisaka)
4647- [#918](https://github.com/oauth2-proxy/oauth2-proxy/pull/918) Fix log header output (@JoelSpeed)
47−- [#911](https://github.com/oauth2-proxy/oauth2-rpoxy/pull/911) Validate provider type on startup.
48+- [#911](https://github.com/oauth2-proxy/oauth2-proxy/pull/911) Validate provider type on startup.
4849- [#906](https://github.com/oauth2-proxy/oauth2-proxy/pull/906) Set up v6.1.x versioned documentation as default documentation (@JoelSpeed)
4950- [#905](https://github.com/oauth2-proxy/oauth2-proxy/pull/905) Remove v5 legacy sessions support (@NickMeves)
5051- [#904](https://github.com/oauth2-proxy/oauth2-proxy/pull/904) Set `skip-auth-strip-headers` to `true` by default (@NickMeves)
http.go+1−1
@@ -64,7 +64,7 @@ func (s *Server) ServeHTTPS() {
6464 addr := s.Opts.HTTPSAddress
6565 config := &tls.Config{
6666 MinVersion: tls.VersionTLS12,
67− MaxVersion: tls.VersionTLS12,
67+ MaxVersion: tls.VersionTLS13,
6868 }
6969 if config.NextProtos == nil {
7070 config.NextProtos = []string{"http/1.1"}