mirrors/traefik
1
0
Fork 0
mirror of https://github.com/traefik/traefik.git synced 2025-08-09 16:17:06 +02:00
Code Issues Projects Releases Wiki Activity

Add tls min and max version to serversTransport in K8s provider.

Browse Source
This commit is contained in:
NEwa-05 2025-07-31 18:07:49 +02:00 committed by NEwa
parent 7c77aeb386
commit 46979796db
1 changed files with 10 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
pkg/server/service/transport_test.go
View File

@ -118,7 +118,8 @@ PtvuNc5EImfSkuPBYLBslNxtjbBvAYgacEdY+gRhn2TeIUApnND58lCWsKbNHLFZ
ajIPbTY+Fe9OTOFTN48ujXNn ajIPbTY+Fe9OTOFTN48ujXNn
-----END PRIVATE KEY-----`) -----END PRIVATE KEY-----`)
var ciphers = []string{"TLS_RSA_WITH_AES_128_CBC_SHA256", "TLS_RSA_WITH_AES_128_CBC_SHA256"} var cipherSuite = []uint16{tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256}
var cipherSuiteName = []string{"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"}
func TestKeepConnectionWhenSameConfiguration(t *testing.T) { func TestKeepConnectionWhenSameConfiguration(t *testing.T) {
srv := httptest.NewUnstartedServer(http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) { srv := httptest.NewUnstartedServer(http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
@ -193,7 +194,11 @@ func TestCipherSuites(t *testing.T) {
cert, err := tls.X509KeyPair(LocalhostCert, LocalhostKey) cert, err := tls.X509KeyPair(LocalhostCert, LocalhostKey)
require.NoError(t, err) require.NoError(t, err)
srv.TLS = &tls.Config{Certificates: []tls.Certificate{cert}} srv.TLS = &tls.Config{
Certificates: []tls.Certificate{cert},
CipherSuites: cipherSuite,
MaxVersion: tls.VersionTLS12,
}
srv.StartTLS() srv.StartTLS()
transportManager := NewTransportManager(nil) transportManager := NewTransportManager(nil)
@ -201,17 +206,8 @@ func TestCipherSuites(t *testing.T) {
dynamicConf := map[string]*dynamic.ServersTransport{ dynamicConf := map[string]*dynamic.ServersTransport{
"test": { "test": {
ServerName: "example.com", ServerName: "example.com",
// For TLS
RootCAs: []types.FileOrContent{types.FileOrContent(LocalhostCert)}, RootCAs: []types.FileOrContent{types.FileOrContent(LocalhostCert)},
CipherSuites: cipherSuiteName,
// For mTLS
Certificates: traefiktls.Certificates{
traefiktls.Certificate{
CertFile: types.FileOrContent(mTLSCert),
KeyFile: types.FileOrContent(mTLSKey),
},
},
CipherSuites: ciphers,
}, },
} }