Revert "fix(webhook): disable tsl 1.0 and 1.1 on webhook service"

This reverts commit a2dd56a. Signed-off-by: Jack Lin <jack.lin@suse.com>
longhorn · May 6, 2024 · 604720e · 604720e
1 parent a2dd56a
commit 604720e
Showing 1 changed file with 0 additions and 20 deletions.
diff --git a/webhook/server/server.go b/webhook/server/server.go
@@ -2,7 +2,6 @@ package server
 
 import (
 	"context"
-	"crypto/tls"
 	"fmt"
 	"net/http"
 	"reflect"
@@ -34,17 +33,6 @@ var (
 	sideEffectClassNone = admissionregv1.SideEffectClassNone
 )
 
-var (
-	whiteListedCiphers = []uint16{
-		tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
-		tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
-		tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
-		tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
-		tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
-		tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
-	}
-)
-
 type WebhookServer struct {
 	context     context.Context
 	namespace   string
@@ -190,10 +178,6 @@ func (s *WebhookServer) runAdmissionWebhookListenAndServe(handler http.Handler,
 				tlsName,
 			},
 			FilterCN: dynamiclistener.OnlyAllow(tlsName),
-			TLSConfig: &tls.Config{
-				MinVersion:   tls.VersionTLS12,
-				CipherSuites: whiteListedCiphers,
-			},
 		},
 	})
 }
@@ -253,10 +237,6 @@ func (s *WebhookServer) runConversionWebhookListenAndServe(handler http.Handler,
 				tlsName,
 			},
 			FilterCN: dynamiclistener.OnlyAllow(tlsName),
-			TLSConfig: &tls.Config{
-				MinVersion:   tls.VersionTLS12,
-				CipherSuites: whiteListedCiphers,
-			},
 		},
 	})
 }