Skip to content

Require TLS 1.2 for certificate checks - #4

Merged
technoporada merged 1 commit into
mainfrom
agentic-autofix/fix-code-scanning-alerts-another-one
Oct 28, 2026
Merged

technoporada merged 1 commit into
mainfrom
agentic-autofix/fix-code-scanning-alerts-another-one

Conversation

@github-agentic-autofix

@github-agentic-autofix github-agentic-autofix AI commented Oct 28, 2026 •

Copy link
Copy Markdown

The certificate check could negotiate outdated TLS versions. Set the SSL context minimum to TLS 1.2 and add regression coverage.

  • Protocol policy: ssl_check now requires TLS 1.2 or newer.
  • Regression coverage: Verify the context enforces the minimum version.
ctx = ssl.create_default_context()
ctx.minimum_version = ssl.TLSVersion.TLSv1_2

@technoporada
technoporada marked this pull request as ready for review October 28, 2026 05:46
@technoporada
technoporada merged commit 3e2e13b into main Oct 28, 2026
11 checks passed
@technoporada
technoporada deleted the agentic-autofix/fix-code-scanning-alerts-another-one branch October 28, 2026 05:47
@github-agentic-autofix github-agentic-autofix AI changed the title [WIP] Fix code scanning alert #6 in repository Require TLS 1.2 for certificate checks Oct 28, 2026
GitHub Agentic Autofix finished work on behalf of technoporada October 28, 2026 05:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants