temporalio / temporalio/temporal
Allow configuring minTLSVersion (and optionally maxTLSVersion) in TLS config
Open
@simvlad is already working on this.
Since Jun 30, 2026.
enhancement
- Dominant language
- Go
- Stars
- 23.2k
- Forks
- 1.9k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 228
Description
Currently TLS minimum version i hardcoded to TLS 1.2
Max version not specified currently.
No way to restrict to specific version.
Ask is to allow to restrict via config, for example something like:
tls:
internode:
server:
minVersion: "1.3"
maxVersion: "1.3"
frontend:
server:
minVersion: "1.3"
maxVersion: "1.3"
One last thing could be to look at comment in tls_config_helper.go where it says
// Helper methods for creating tls.Config structs to ensure MinVersion is 1.3
but code sets
MinVersion: tls.VersionTLS12,
might be a typo in comment. Thanks!
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.