Merge pull request #1806 from vmware-tanzu/revert_supervisor_disabling_http2

revert the disabling of http2 for the Supervisor OIDC endpoints
This commit is contained in:
Ryan Richard
2023-12-06 20:33:27 -08:00
committed by GitHub

View File

@@ -531,10 +531,6 @@ func runSupervisor(ctx context.Context, podInfo *downward.PodInfo, cfg *supervis
}
c := ptls.Default(nil)
// Remove "h2" from the list for now, until we have a better idea of how to mitigate
// potential http2 rapid reset vulnerabilities. This disables serving requests using http2.
c.NextProtos = []string{"http/1.1"}
c.GetCertificate = func(info *tls.ClientHelloInfo) (*tls.Certificate, error) {
cert := dynamicTLSCertProvider.GetTLSCert(strings.ToLower(info.ServerName))
foundServerNameCert := cert != nil