Skip to content

change tls default to v1.3 #452

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
pjfanning wants to merge 7 commits into
base: main
Choose a base branch
from
Draft

change tls default to v1.3 #452

pjfanning wants to merge 7 commits into from

Conversation

@pjfanning
Copy link
Member

@pjfanning pjfanning commented Jun 22, 2025 •
edited
Loading

  • WIP - having trouble because the openjdk docker image that we use in some integration tests is deprecated and out of date
  • introduces new configs to allow user control
    • pekko.discovery.kubernetes-api.tls-version = TLSv1.3
    • pekko.coordination.lease.kubernetes.tls-version = TLSv1.3
  • affects clients for Kubernetes API
  • so far, we are getting integration test failures
    javax.net.ssl.SSLHandshakeException, with message: Received fatal alert: handshake_failure.
  • seems like the K8s API server that we are testing with won't accept TLS 1.3 in current config

@pjfanning pjfanning added this to the 1.2.0 milestone Jun 22, 2025
@pjfanning pjfanning marked this pull request as draft June 22, 2025 12:59
@pjfanning pjfanning mentioned this pull request Jun 23, 2025
Open
@pjfanning pjfanning modified the milestones: 1.2.0, 2.0.0 Nov 14, 2025
@pjfanning pjfanning mentioned this pull request Nov 17, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

2.0.0-M1

Development

Successfully merging this pull request may close these issues.

1 participant

@pjfanning