Skip to content

Disable TLS_ECDHE_RSA_WITH_AES_(128|256)_CBC_SHA cipher suites#187

Open
vpnachev wants to merge 1 commit intogardener:mainfrom
vpnachev:tls/disable-some-cipher-suites
Open

Disable TLS_ECDHE_RSA_WITH_AES_(128|256)_CBC_SHA cipher suites#187
vpnachev wants to merge 1 commit intogardener:mainfrom
vpnachev:tls/disable-some-cipher-suites

Conversation

@vpnachev
Copy link
Member

What this PR does / why we need it:
Disable TLS_ECDHE_RSA_WITH_AES_(128|256)_CBC_SHA cipher suites

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

The TLS cipher suites `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA` and `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`, available in TLS up to v1.2, have been unconditionally disabled.

@gardener-prow
Copy link

gardener-prow bot commented Mar 19, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign dimityrmirchev for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gardener-prow gardener-prow bot added do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Mar 19, 2026
@vpnachev
Copy link
Member Author

/kind enhancement

@gardener-prow gardener-prow bot added kind/enhancement Enhancement, improvement, extension cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. and removed do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. labels Mar 19, 2026
@dimityrmirchev dimityrmirchev added the crypto Affecting cryptography or security mechanisms (encryption, keys, ciphers, hashes, signatures, etc.). label Mar 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. crypto Affecting cryptography or security mechanisms (encryption, keys, ciphers, hashes, signatures, etc.). kind/enhancement Enhancement, improvement, extension size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants