From 6acde9b26604c045438bd5ad2fc58f8809575d61 Mon Sep 17 00:00:00 2001 From: anleib Date: Sat, 5 Oct 2024 10:08:27 -0400 Subject: [PATCH] Added TLSv1.3, removed insecure TLSv1 and TLSv1.1 --- .../kafka/connect/apiclient/rest/HttpsContextBuilder.java | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/main/java/org/sourcelab/kafka/connect/apiclient/rest/HttpsContextBuilder.java b/src/main/java/org/sourcelab/kafka/connect/apiclient/rest/HttpsContextBuilder.java index fe8c831..5e4372e 100644 --- a/src/main/java/org/sourcelab/kafka/connect/apiclient/rest/HttpsContextBuilder.java +++ b/src/main/java/org/sourcelab/kafka/connect/apiclient/rest/HttpsContextBuilder.java @@ -50,9 +50,10 @@ public class HttpsContextBuilder { private static final Logger logger = LoggerFactory.getLogger(HttpsContextBuilder.class); /** - * Accept TLS1.2, 1.1, and 1.0 protocols. + * Accept TLS1.3, and 1.2 protocols. + * TLSv1 and TLSv1.1 are insecure and should not be used. */ - private static final String[] sslProtocols = new String[] { "TLSv1.2", "TLSv1.1", "TLSv1" }; + private static final String[] sslProtocols = new String[] {"TLSv1.3", "TLSv1.2"}; /** * Client configuration.