Require TLS 1.2 or higher

README.md

@@ -8,7 +8,7 @@ SSH honeypot with web-frontend.
 
 ## Requirements
 
-* `go > 1.16`
+* `go >= 1.16`
 
 Requires a postgres database if you want data to persist through server restart.
 

web/server.go

@@ -2,6 +2,7 @@ package web
 
 import (
 	"context"
+	"crypto/tls"
 	"encoding/json"
 	"fmt"
 	"io"
@@ -59,6 +60,7 @@ func NewServer(cfg config.FrontendConfig, hs *honeypot.HoneypotServer, store sto
 		}
 
 		tlsConfig := certManager.TLSConfig()
+		tlsConfig.MinVersion = tls.VersionTLS12
 		s.TLSConfig = tlsConfig
 		s.RegisterOnShutdown(func() {
 			timeoutCtx, cancel := context.WithTimeout(context.Background(), 3*time.Second)