bottlerocket-os / bottlerocket-os/bottlerocket
Support for TLS1.3 in BOTTLEROCKET_x86_64_FIPS
Open
status/icebox
type/enhancement
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
Hi, I am using bottlerocket-aws-k8s-1.31-fips-x86_64-v1.39.0-0968c061 and noticed that openssl version is really old, it does not even support TLS1.3.
```
[root@admin]# openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017
[root@admin]#
```
**readinessProbes** are failing because we have configured our apps to only accept TLS1.3, but **kubelet** is sending probes with TLS1.2 max.
I had to decrease our min TLS version in our apps to accept TLS1.2 but this is not ideal.
Are there any plans to update bottlerocket-fips image to suport TLS1.3?
Thanks!
Contributor guide
Assessment
This issue has not been assessed yet.