Skip to content

[release-1.31] Pass 1.3 ciphersuites through proxy metadata (#2227) - #2333

Open
nrfox wants to merge 1 commit into
istio-ecosystem:release-1.31from
nrfox:tls-ciphers-1-31
Open

nrfox wants to merge 1 commit into
istio-ecosystem:release-1.31from
nrfox:tls-ciphers-1-31

Conversation

@nrfox

@nrfox nrfox commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Envoy does not allow setting cipher suites for TLS 1.3 BUT you can configure them in openssl when that is your crypto backend. The openshift envoy image has been updated to allow configuring these via env var.

What type of PR is this?

  • Enhancement / New Feature
  • Bug Fix
  • Refactor
  • Optimization
  • Test
  • Documentation Update

What this PR does / why we need it:

Cherry pick of #2227 to release-1.31.

Envoy does not allow setting cipher suites for TLS 1.3 BUT you can configure them in openssl when that is your crypto backend. The openshift envoy image has been updated to allow configuring these via env var.

Which issue(s) this PR fixes:

Fixes #

Related Issue/PR #

Additional information:

Envoy does not allow setting cipher suites for TLS 1.3 BUT you can
configure them in openssl when that is your crypto backend. The
openshift envoy image has been updated to allow configuring these via
env var.

Signed-off-by: Nick Fox <nfox@redhat.com>
@nrfox
nrfox requested a review from a team as a code owner September 15, 2026 13:07
@nrfox

nrfox commented Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

/retest

1 similar comment
@mkralik3

Copy link
Copy Markdown
Contributor

/retest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants