fix (ldap): increase max tls to 1.3

hashicorp · Jul 14, 2023 · 822334c · 822334c
1 parent 1d638dd
commit 822334c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/ldap/client_test.go b/ldap/client_test.go
@@ -130,6 +130,12 @@ func TestClient_NewClient(t *testing.T) {
 			wantErrIs:       ErrInvalidParameter,
 			wantErrContains: "invalid 'tls_min_version' in config",
 		},
+		{
+			name: "valid-tls-max",
+			conf: &ClientConfig{
+				TLSMaxVersion: "tls13",
+			},
+		},
 		{
 			name: "invalid-tls-max",
 			conf: &ClientConfig{

diff --git a/ldap/config.go b/ldap/config.go
@@ -35,7 +35,7 @@ const (
 	DefaultTLSMinVersion = "tls12"
 
 	// DefaultTLSMaxVersion for the ClientConfig.TLSMaxVersion
-	DefaultTLSMaxVersion = "tls12"
+	DefaultTLSMaxVersion = "tls13"
 
 	// DefaultOpenLDAPUserPasswordAttribute defines the attribute name for the
 	// openLDAP default password attribute which will always be excluded