From 9a32e2735d64e84edb2fd2f2ab93d02a8ee38802 Mon Sep 17 00:00:00 2001 From: Derek McGowan Date: Fri, 3 Jan 2025 11:02:00 -0800 Subject: [PATCH] Add server next protos configuration Latest version of grpc added more strict enforcement of ALPN Signed-off-by: Derek McGowan --- ca/config.go | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/ca/config.go b/ca/config.go index 9de5a5738c..6e0c8a041b 100644 --- a/ca/config.go +++ b/ca/config.go @@ -15,14 +15,15 @@ import ( cfconfig "github.com/cloudflare/cfssl/config" events "github.com/docker/go-events" + "github.com/opencontainers/go-digest" + "github.com/pkg/errors" + "google.golang.org/grpc/credentials" + "github.com/moby/swarmkit/v2/api" "github.com/moby/swarmkit/v2/connectionbroker" "github.com/moby/swarmkit/v2/identity" "github.com/moby/swarmkit/v2/log" "github.com/moby/swarmkit/v2/watch" - "github.com/opencontainers/go-digest" - "github.com/pkg/errors" - "google.golang.org/grpc/credentials" ) const ( @@ -649,6 +650,7 @@ func NewServerTLSConfig(certs []tls.Certificate, rootCAPool *x509.CertPool) (*tl ClientCAs: rootCAPool, PreferServerCipherSuites: true, MinVersion: tls.VersionTLS12, + NextProtos: alpnProtoStr, }, nil }