From 1d9f67ac70571e9d5def1581633b1148f83d5b5c Mon Sep 17 00:00:00 2001 From: sarahcaseybot Date: Thu, 11 Mar 2021 22:27:50 -0500 Subject: [PATCH] Change the default public TLS enforcement start date (#1006) --- .../main/java/google/registry/proxy/config/default-config.yaml | 2 +- .../java/google/registry/proxy/config/proxy-config-alpha.yaml | 3 --- .../registry/proxy/config/proxy-config-crash-canary.yaml | 3 --- .../java/google/registry/proxy/config/proxy-config-crash.yaml | 3 --- .../java/google/registry/proxy/config/proxy-config-local.yaml | 3 --- .../registry/proxy/config/proxy-config-sandbox-canary.yaml | 3 --- .../google/registry/proxy/config/proxy-config-sandbox.yaml | 3 --- 7 files changed, 1 insertion(+), 19 deletions(-) diff --git a/proxy/src/main/java/google/registry/proxy/config/default-config.yaml b/proxy/src/main/java/google/registry/proxy/config/default-config.yaml index 5218b1e50..d37fe2413 100644 --- a/proxy/src/main/java/google/registry/proxy/config/default-config.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/default-config.yaml @@ -9,7 +9,7 @@ projectId: your-gcp-project-id # Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "2021-04-01T16:00:00Z" +tlsEnforcementStartTime: "1970-01-01T00:00:00Z" # OAuth scope that the GoogleCredential will be constructed with. This list # should include all service scopes that the proxy depends on. diff --git a/proxy/src/main/java/google/registry/proxy/config/proxy-config-alpha.yaml b/proxy/src/main/java/google/registry/proxy/config/proxy-config-alpha.yaml index d8452d363..ea71687e3 100644 --- a/proxy/src/main/java/google/registry/proxy/config/proxy-config-alpha.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/proxy-config-alpha.yaml @@ -1,4 +1 @@ # Add environment-specific proxy configuration here. - -# Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "1970-01-01T00:00:00Z" diff --git a/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash-canary.yaml b/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash-canary.yaml index d8452d363..ea71687e3 100644 --- a/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash-canary.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash-canary.yaml @@ -1,4 +1 @@ # Add environment-specific proxy configuration here. - -# Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "1970-01-01T00:00:00Z" diff --git a/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash.yaml b/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash.yaml index d8452d363..ea71687e3 100644 --- a/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/proxy-config-crash.yaml @@ -1,4 +1 @@ # Add environment-specific proxy configuration here. - -# Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "1970-01-01T00:00:00Z" diff --git a/proxy/src/main/java/google/registry/proxy/config/proxy-config-local.yaml b/proxy/src/main/java/google/registry/proxy/config/proxy-config-local.yaml index d8452d363..ea71687e3 100644 --- a/proxy/src/main/java/google/registry/proxy/config/proxy-config-local.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/proxy-config-local.yaml @@ -1,4 +1 @@ # Add environment-specific proxy configuration here. - -# Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "1970-01-01T00:00:00Z" diff --git a/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox-canary.yaml b/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox-canary.yaml index d8452d363..ea71687e3 100644 --- a/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox-canary.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox-canary.yaml @@ -1,4 +1 @@ # Add environment-specific proxy configuration here. - -# Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "1970-01-01T00:00:00Z" diff --git a/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox.yaml b/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox.yaml index d8452d363..ea71687e3 100644 --- a/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox.yaml +++ b/proxy/src/main/java/google/registry/proxy/config/proxy-config-sandbox.yaml @@ -1,4 +1 @@ # Add environment-specific proxy configuration here. - -# Time to begin enforcement of TLS versions and cipher suites. -tlsEnforcementStartTime: "1970-01-01T00:00:00Z"