specifying TLS supported protocols to disable old ones

cdlib · Feb 7, 2024 · ee3a677 · ee3a677
1 parent 635719b
commit ee3a677
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
@@ -12,11 +12,15 @@ server.port=18443
 server.insecure-redirect-port=18443
 server.insecure-port=18880
 
+# TLS
+server.ssl.protocol=TLS
+server.ssl.enabled-protocols=TLSv1.2,TLSv1.3
+
 # Management
 management.endpoints.enabled-by-default=false
 management.endpoints.web.base-path=/status
 
 # Managment - Health
 management.endpoints.web.path-mapping.health=health
 management.endpoint.health.enabled=false
-management.endpoint.health.show-details=always
+management.endpoint.health.show-details=always