New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove pre-tls1.2 tracking code from Boulder #7710

Open

mcpherrinm opened this issue Sep 13, 2024 · 0 comments · May be fixed by #7711

Assignees

Contributor

mcpherrinm commented Sep 13, 2024 •

edited

Loading

as of https://community.letsencrypt.org/t/rejecting-tls-1-0-1-1-for-inbound-acme-connections/176107/4?u=mcpherrinm, the incoming LBs no longer support 1.0 / 1.1, so we can remove the code in Boulder which looks for and rejects these requests:

https://github.com/letsencrypt/boulder/blob/main/wfe2/wfe.go#L288-L292
https://github.com/letsencrypt/boulder/blob/main/wfe2/wfe_test.go#L3790-L3803

mcpherrinm assigned kruti-s

kruti-s linked a pull request

that will close this issue

Remove code that rejects old TLS requests #7711

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment