URL: https://github.com/freeipa/freeipa/pull/3350 Author: tiran Title: #3350: Use only TLS 1.2 by default Action: opened
PR body: """ TLS 1.3 is causing some trouble with client cert authentication. Conditional client cert authentication requires post-handshake authentication extension on TLS 1.3. The new feature is not fully implemented yet.
TLS 1.0 and 1.1 are no longer state of the art and now disabled by default.
TLS 1.2 works everywhere and supports PFS.
Related: pagure.io/freeipa/issue/7667 """
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3350/head:pr3350 git checkout pr3350