Update ALB to use RECOMMENDED_TLS SslPolicy to remove TLS1.1 (#522)

Signed-off-by: Peter Zhu <[email protected]>
opensearch-project · Feb 10, 2025 · f89a814 · f89a814
1 parent 2ab2088
commit f89a814
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/network/ci-external-load-balancer.ts b/lib/network/ci-external-load-balancer.ts
@@ -43,7 +43,7 @@ export class JenkinsExternalLoadBalancer {
     });
 
     this.listener = this.loadBalancer.addListener('JenkinsListener', {
-      sslPolicy: props.useSsl ? SslPolicy.RECOMMENDED : undefined,
+      sslPolicy: props.useSsl ? SslPolicy.RECOMMENDED_TLS : undefined,
       port: accessPort,
       open: false,
       certificates: props.useSsl ? [props.listenerCertificate] : undefined,