up icon indicating copy to clipboard operation
up copied to clipboard

Specify a Minimum TLS Protocol Version for Custom Domains in API Gateway

Open chatch opened this issue 4 years ago • 1 comments

Prerequisites

  • [x] I am running the latest version. (up upgrade)
  • [x] I searched to see if the issue already exists.
  • [x] I inspected the verbose debug output with the -v, --verbose flag.
  • [ ] Are you an Up Pro subscriber?

Description

Currently the TLS version defaults to 1.0. I have to manually upgrade it to 1.2. So it would be nice if it could be specifed in the custom domain config in up.json.

Also consider changing the default to 1.2 instead of 1.0?

AWS docs for the setting are here: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

Steps to Reproduce

Deploy with a custom domain. Go to AWS console > API Gateway > custom domains and see the TLS version on the domain is 1.0.

chatch avatar Jul 16 '19 06:07 chatch

I would love to see 1.2 as the default or at least a config option as well. I always forget to go change it when spinning up a new project.

einkoro avatar Dec 31 '20 04:12 einkoro