Skip to content
This repository has been archived by the owner on Mar 19, 2024. It is now read-only.

Commit

Permalink
e2e: pass TLS min version 1.0 config to checkTCPTLSRoute http client …
Browse files Browse the repository at this point in the history
…where needed

Go 1.18 disabled TLS 1.0 and 1.1 by default for client connections
https://tip.golang.org/doc/go1.18#tls10
  • Loading branch information
mikemorris committed Apr 27, 2022
1 parent 8cc904d commit e85715f
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions internal/commands/server/k8s_e2e_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -966,13 +966,15 @@ func TestTCPMeshService(t *testing.T) {
// supported by Envoy defaults
checkTCPTLSRoute(t, listenerOnePort, &tls.Config{
InsecureSkipVerify: true,
MinVersion: tls.VersionTLS10,
MaxVersion: tls.VersionTLS11,
}, "remote error: tls: protocol version not supported", "connection not rejected with expected error in allotted time")

// Service two listener overrides default config
checkTCPTLSRoute(t, listenerTwoPort, &tls.Config{
InsecureSkipVerify: true,
CipherSuites: []uint16{tls.TLS_RSA_WITH_AES_128_CBC_SHA},
MinVersion: tls.VersionTLS10,
MaxVersion: tls.VersionTLS11,
}, serviceTwo.Name, "service not routable in allotted time")

Expand Down

0 comments on commit e85715f

Please sign in to comment.