public inbox for [email protected]
help / color / mirror / Atom feedFrom: Khushboo Vashi <[email protected]>
To: John Barker <[email protected]>
Cc: [email protected]
Subject: Re: Enforcing TLS 1.3 as a a minimum version
Date: Tue, 8 Apr 2025 16:40:04 +0530
Message-ID: <CAFOhELeMYYFz8vpBpd7DKtjW10THuv22WZ6NiYUZTZZ634MaQw@mail.gmail.com> (raw)
In-Reply-To: <CA+7KU8qGkLzzAFJHuJfCe=jZuOG2ZHAWQvgv+oW+5m5ZBNAsOA@mail.gmail.com>
References: <CA+7KU8pPEXm-EbY0nk3CwiMkM962AMapwghwSAu0QmThnkZoNQ@mail.gmail.com>
<CA+7KU8qGkLzzAFJHuJfCe=jZuOG2ZHAWQvgv+oW+5m5ZBNAsOA@mail.gmail.com>
Hi,
On Tue, Apr 8, 2025 at 12:00 AM John Barker <[email protected]> wrote:
>
> I am running pgAdmin 9.1 in a podman container and am trying to ensure
> that TLS 1.3 is the minimum version. I have created an override file and
> I know that it is being read at startup but the enforcement of TLS 1.3 is
> not happening. I am using this configuration as suggested by the
> documentation here: https://docs.gunicorn.org/en/21.2.0/settings.html
>
> Any idea of what to check. I know the file is being parsed because if I
> introduce a bad config, it is noted at startup.
>
> Also, where or how is the instance variable for the config defined?
>
> "The callable needs to accept an instance variable for the Config"
>
Can you please share your gunicorn_config.py file?
The code looks good to me, and you said that you mapped the correct
Gunicorn config file from the container.
Also, what testing have you done to check whether the TLS version is
enforced or not?
>
> The below is a file mapped into the container called gunicorn_config.py
>
> def ssl_context(conf, default_ssl_context_factory):
> import ssl
> context = default_ssl_context_factory()
> context.minimum_version = ssl.TLSVersion.TLSv1_3
> return context
>
>
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected]
Subject: Re: Enforcing TLS 1.3 as a a minimum version
In-Reply-To: <CAFOhELeMYYFz8vpBpd7DKtjW10THuv22WZ6NiYUZTZZ634MaQw@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox