Merge pull request #8588 from dqminh/remove-sslv3

remove sslv3 from server's TLS supported versions
2014-10-17 12:05:48 -04:00 · 2014-10-17 12:05:48 -04:00 · 4c89bdaba2
commit 4c89bdaba2
parent 09b02899d9 20867c3b1f
1 changed files with 5 additions and 1 deletions
--- a/docs/registry.go
+++ b/docs/registry.go
@ -36,7 +36,11 @@ const (
 )

 func newClient(jar http.CookieJar, roots *x509.CertPool, cert *tls.Certificate, timeout TimeoutType) *http.Client {
-	tlsConfig := tls.Config{RootCAs: roots}
+	tlsConfig := tls.Config{
+		RootCAs: roots,
+		// Avoid fallback to SSL protocols < TLS1.0
+		MinVersion: tls.VersionTLS10,
+	}

 	if cert != nil {
 		tlsConfig.Certificates = append(tlsConfig.Certificates, *cert)