zio-http icon indicating copy to clipboard operation
zio-http copied to clipboard

Configure TLS protocol versions in SSLConfig

Open antonstamov opened this issue 1 month ago • 6 comments

Configure TLS protocol versions in SSLConfig

This pull request adds the ability to configure TLS protocol versions in SSLConfig for HTTP servers.

Features

  • Adds configurable TLS protocol versions support in SSLConfig with default TLSv1.3 and TLSv1.2
  • Provides fine-grained control over TLS security settings, allowing disabling of older, less secure protocols

Changes

  • Extended SSLConfig with optional protocols parameter
  • Updated all factory methods to support the new configuration
  • Updated documentation to reflect the new TLS protocol configuration options
  • Fixed scalafmt formatting issues from the original PR

Based on the original work in #3714, which was closed due to binary compatibility issues and scalafmt errors.

Closes #3714

antonstamov avatar Nov 19 '25 21:11 antonstamov

Deploy Preview for zio-http ready!

Name Link
Latest commit 9f28ea349b65ce6f329e09782da6e11861c32e4e
Latest deploy log https://app.netlify.com/projects/zio-http/deploys/6927fc5cf64dec00086fb42c
Deploy Preview https://deploy-preview-3806--zio-http.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify[bot] avatar Nov 19 '25 21:11 netlify[bot]

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Nov 19 '25 21:11 CLAassistant

You can't just ignore binary incompatibility. You have to solve it. You can rebase and use @unroll@ to fix it

987Nabil avatar Nov 24 '25 20:11 987Nabil

@987Nabil please review

maxcom avatar Dec 02 '25 07:12 maxcom

Why the manual unroll?

987Nabil avatar Dec 06 '25 05:12 987Nabil

Why the manual unroll?

@unroll works fine on Scala 2, but fails to compile on Scala 3. I believe this is a bug or a limitation of the unroll plugin, likely related to the presence of additional apply methods in the SSLConfig companion object.

maxcom avatar Dec 06 '25 07:12 maxcom