From cd8946631b222dfff1727083d75dfe2dd825d1a4 Mon Sep 17 00:00:00 2001 From: Ernesto Puerta Date: Mon, 13 Mar 2023 11:03:37 +0100 Subject: [PATCH] mgr/dashboard: force TLS 1.3 Fixes: https://tracker.ceph.com/issues/58942 Signed-off-by: Ernesto Puerta --- src/pybind/mgr/dashboard/module.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pybind/mgr/dashboard/module.py b/src/pybind/mgr/dashboard/module.py index 3b3519e7bf0f4..e50bb2adb5f69 100644 --- a/src/pybind/mgr/dashboard/module.py +++ b/src/pybind/mgr/dashboard/module.py @@ -178,9 +178,9 @@ class CherryPyConfig(object): context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH) context.load_cert_chain(cert_fname, pkey_fname) if sys.version_info >= (3, 7): - context.minimum_version = ssl.TLSVersion.TLSv1_2 + context.minimum_version = ssl.TLSVersion.TLSv1_3 else: - context.options |= ssl.OP_NO_TLSv1 | ssl.OP_NO_TLSv1_1 + context.options |= ssl.OP_NO_TLSv1 | ssl.OP_NO_TLSv1_1 | ssl.OP_NO_TLSv1_2 config['server.ssl_module'] = 'builtin' config['server.ssl_certificate'] = cert_fname -- 2.39.5