Skip to content

Commit

Permalink
Merge pull request #1806 from vmware-tanzu/revert_supervisor_disablin…
Browse files Browse the repository at this point in the history
…g_http2

revert the disabling of http2 for the Supervisor OIDC endpoints
  • Loading branch information
cfryanr authored Dec 7, 2023
2 parents a05acad + c5d1f38 commit 3e74b38
Showing 1 changed file with 0 additions and 4 deletions.
4 changes: 0 additions & 4 deletions internal/supervisor/server/server.go
Original file line number Diff line number Diff line change
Expand Up @@ -531,10 +531,6 @@ func runSupervisor(ctx context.Context, podInfo *downward.PodInfo, cfg *supervis
}

c := ptls.Default(nil)
// Remove "h2" from the list for now, until we have a better idea of how to mitigate
// potential http2 rapid reset vulnerabilities. This disables serving requests using http2.
c.NextProtos = []string{"http/1.1"}

c.GetCertificate = func(info *tls.ClientHelloInfo) (*tls.Certificate, error) {
cert := dynamicTLSCertProvider.GetTLSCert(strings.ToLower(info.ServerName))
foundServerNameCert := cert != nil
Expand Down

0 comments on commit 3e74b38

Please sign in to comment.