crypto/tls: don't require Config to set MinVersion = TLS13 when using QUIC #63722
Labels
NeedsFix
The path to resolution is known, but the work has not been done.
Milestone
What version of Go are you using (
go version
)?Does this issue reproduce with the latest release?
Yes
What did you do?
Using QUIC currently requires passing in a
tls.Config
that defines TLS 1.3 as its minimum TLS version. This makes it difficult to run a TLS/TCP and QUIC service using the sametls.Config
, since the TLS/TCP service potentially doesn't want to limit the available TLS versions to TLS 1.3.The workaround applied by quic-go at the moment is cloning the config and setting TLS 1.3, but this has various downsides, as described by @dneil in #63691.
What did you expect to see?
crypto/tls knows when a
Config
is used for QUIC. Instead of requiringMinVersion
to be set explicitly, it should treat any config as if this field was set to TLS 1.3.The text was updated successfully, but these errors were encountered: