Azure / Azure/Azure-Landing-Zones
All TLS policies specify TLS 1.2 as the latest version. The RFC for TLS 1.3 was approved in 2018. Most azure services support TLS 1.3.
Open
Needs: Upstream Policy Changes :arrows_clockwise:
Status: Long Term :hourglass:
Transfer From: Enterprise-Scale :arrow_right:
- Dominant language
- PowerShell
- Stars
- 96
- Forks
- 70
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 7
Description
**Describe the bug**
All TLS policies in this repo are denying TLS 1.3 from being used.
**Steps to reproduce**
1. Apply any of the TLS deny policies from this repo
2. Try deploying a resource with TLS 1.3 set as the minimum version
**Recommendation**
1. Update all polices to accept either TLS 1.2 OR TLS 1.3 versions with a plan to eventually deprecate TLS 1.2.
Contributor guide
Research direction
Search the repository for the TLS deny policies, then reproduce the reported deployment with TLS 1.3 set as the minimum version. Update the affected policies so TLS 1.2 and TLS 1.3 are accepted, and verify that the policies no longer deny supported TLS 1.3 configurations.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, powershell
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100