Remove TLS1.0/1.1 support. Resolves microsoft#3914 (microsoft#3916)

CloudKubed · May 7, 2024 · 49813bf · 49813bf
1 parent a094c19
commit 49813bf
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -10,6 +10,7 @@ ENHANCEMENTS:
 BUG FIXES:
 * Update Guacomole Linux VM Images to 22.04 and 20.04 Data Science VM. Part of ([#3523](https://github.com/microsoft/AzureTRE/issues/3523))
 * Update to Resource Processor Image, now using Ubuntu 22.04 (jammy). Part of ([#3523](https://github.com/microsoft/AzureTRE/issues/3523))  
+* Remove TLS1.0/1.1 support from Application Gateway
 
 COMPONENTS:
 

diff --git a/core/terraform/appgateway/appgateway.tf b/core/terraform/appgateway/appgateway.tf
@@ -65,6 +65,12 @@ resource "azurerm_application_gateway" "agw" {
     key_vault_secret_id = azurerm_key_vault_certificate.tlscert.secret_id
   }
 
+  # SSL policy
+  ssl_policy {
+    policy_type = "Predefined"
+    policy_name = "AppGwSslPolicy20220101"
+  }
+
   # Backend pool with the static website in storage account.
   backend_address_pool {
     name  = local.staticweb_backend_pool_name

diff --git a/core/version.txt b/core/version.txt
@@ -1 +1 @@
-__version__ = "0.9.8"
+__version__ = "0.9.9"