diff options
| author | zuzuviewer <750938164@qq.com> | 2024-08-02 11:00:22 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-08-01 20:00:22 -0700 |
| commit | 5ee50d26d8db9075b8041a170d8a3d5ff9a37a56 (patch) | |
| tree | db048507dd3ab897b2386a3097834be8e60a6421 /weed/command/s3.go | |
| parent | 4fee496b49e86d92b8980bbe441c066ae3fdf326 (diff) | |
| download | seaweedfs-5ee50d26d8db9075b8041a170d8a3d5ff9a37a56.tar.xz seaweedfs-5ee50d26d8db9075b8041a170d8a3d5ff9a37a56.zip | |
fix CVE-2016-2183 (#5844)
* fix CVE-2016-2183
* allow tls.min_version and tls.max_version not set
Diffstat (limited to 'weed/command/s3.go')
| -rw-r--r-- | weed/command/s3.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/weed/command/s3.go b/weed/command/s3.go index 0575cfa58..f4c7166c3 100644 --- a/weed/command/s3.go +++ b/weed/command/s3.go @@ -328,6 +328,10 @@ func (s3opt *S3Options) startS3Server() bool { ClientAuth: clientAuth, ClientCAs: caCertPool, } + err = security.FixTlsConfig(util.GetViper(), httpS.TLSConfig) + if err != nil { + glog.Fatalf("error with tls config: %v", err) + } if *s3opt.portHttps == 0 { glog.V(0).Infof("Start Seaweed S3 API Server %s at https port %d", util.Version(), *s3opt.port) if s3ApiLocalListener != nil { |