Uploaded image for project: 'Couchbase Mobile'
  1. Couchbase Mobile
  2. CM-756

Update SGW default minimum TLS to 1.2

    XMLWordPrintable

Details

    Description

      Sync Gateway is defaulting to set the minimum TLS to 1.0.  [
      https://github.com/couchbase/sync_gateway/blob/master/rest/config.go#L45]

      https://github.com/couchbase/sync_gateway/blob/master/rest/config.go#L296

      TLS 1.0 and 1.1 is no longer considered secure and has been deprecated by all Browsers and the majority of other software. 

      We should set the minimum default TLS to 1.2 and work towards deprecation of TLS 1.0 and 1.1.    Note that in Couchbase Server 7.0, the default minimum TLS is 1.2, tracked as MB-41794

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              daniel.petersen Daniel Petersen
              ianmccloy Ian McCloy (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty