fluent / fluent/fluent-bit

TLS version negotiation issue

Open
#11,817 6 comments 0 reactions 0 assignees View on GitHub
status: waiting-for-triage
Dominant language
C
Stars
8.1k
Forks
2k
Avg merge
4d 20h
Merged PRs (30d)
71

Description

## Bug Report

TLS does not work when targets accepts only TLSv1.2 and tls.min_version set to TLSv1.2

**To Reproduce**
Output accepts only TLSv1.2, not newer. Otel output in fluentbit set to tls.min_version: TLSv1.2
```
outputs:
- name: opentelemetry
match: "*"
host: host
port: port
tls: on
tls.min_version: "TLSv1.2"
tls.verify: on
tls.ca_file: file
tls.crt_file: file
tls.key_file: file
```

Result:
Image

**Expected behavior**
TLSv1.2 should be negotiated and requests should reach the target

Version used: 4.1.1, 4.2.4, 5.0.5

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.