URL:
https://github.com/freeipa/freeipa/pull/3350
Author: tiran
Title: #3350: Use only TLS 1.2 by default
Action: opened
PR body:
"""
TLS 1.3 is causing some trouble with client cert authentication.
Conditional client cert authentication requires post-handshake
authentication extension on TLS 1.3. The new feature is not fully
implemented yet.
TLS 1.0 and 1.1 are no longer state of the art and now disabled by
default.
TLS 1.2 works everywhere and supports PFS.
Related: pagure.io/freeipa/issue/7667
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3350/head:pr3350
git checkout pr3350