microsoft / microsoft/MicroHack

[BUG] Application gateway deprecated TLS version

Open
#280 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs triage
Dominant language
Jupyter Notebook
Stars
198
Forks
184
Avg merge
16h 57m
Merged PRs (30d)
70

Description

Is there an existing issue for this?
  • I have searched the existing issues
Microhack

03-Azure/01-03-Infrastructure/07_Azure_Monitor

Current Behavior

Receiving the following error:

_The TLS policy AppGwSslPolicy20150501 for Application Gateway /subscriptions/xxxxx/resourceGroups/mh-azmonitor/providers/Microsoft.Network/applicationGateways/appgw-microhack is using a deprecated TLS version. Update it to a supported version. Learn more https://aka.ms/appgw-oldtlsversions (Code: ApplicationGatewayDeprecatedTlsVersionUsedInSslPolicy)_

Please review the following change to ensure compliance with current security standards.
At Line 826, the sslPolicy property under Microsoft.Network/applicationGateways should be updated to use a supported TLS policy.

from
"policyName": "AppGwSslPolicy20150501"
to
"policyName": "AppGwSslPolicy20220101"

Expected Behavior

No response

Steps To Reproduce

No response

Anything else?

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start in 03-Azure/01-03-Infrastructure/07_Azure_Monitor and locate the infrastructure definition at line 826 for Microsoft.Network/applicationGateways. Review the sslPolicy setting and update the deprecated policy name to the supported one specified in the issue. Done when the Application Gateway definition no longer uses AppGwSslPolicy20150501 and complies with the reported TLS requirement.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.