From a2b00495cdcea73dc24e3f2908ede32778b20264 Mon Sep 17 00:00:00 2001
From: Loganaden Velvindron <logan@cyberstorm.mu>
Date: Sun, 1 Feb 2026 08:53:58 +0400
Subject: [PATCH] require TLS 1.3 as minimum

TLS 1.2 is not getting any protocol update anytime soon.
https://www.ietf.org/archive/id/draft-ietf-tls-tls12-frozen-08.html
---
 src/infra/tls/gateway.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/infra/tls/gateway.ts b/src/infra/tls/gateway.ts
index 5e5d4eca7c..9912a243fb 100644
--- a/src/infra/tls/gateway.ts
+++ b/src/infra/tls/gateway.ts
@@ -134,7 +134,7 @@ export async function loadGatewayTlsRuntime(
         cert,
         key,
         ca,
-        minVersion: "TLSv1.2",
+        minVersion: "TLSv1.3",
       },
     };
   } catch (err) {