From 56cf100073f1957796c06517582080eec7fa4e7e Mon Sep 17 00:00:00 2001 From: Peter Zhu Date: Wed, 5 Feb 2025 17:06:36 -0500 Subject: [PATCH] Update ALB to use RECOMMENDED_TLS SslPolicy to remove TLS1.1 Signed-off-by: Peter Zhu --- lib/network/ci-external-load-balancer.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/network/ci-external-load-balancer.ts b/lib/network/ci-external-load-balancer.ts index 4603f718..69a2f25a 100644 --- a/lib/network/ci-external-load-balancer.ts +++ b/lib/network/ci-external-load-balancer.ts @@ -43,7 +43,7 @@ export class JenkinsExternalLoadBalancer { }); this.listener = this.loadBalancer.addListener('JenkinsListener', { - sslPolicy: props.useSsl ? SslPolicy.RECOMMENDED : undefined, + sslPolicy: props.useSsl ? SslPolicy.RECOMMENDED_TLS : undefined, port: accessPort, open: false, certificates: props.useSsl ? [props.listenerCertificate] : undefined,