set min TLS version

Signed-off-by: Thomas Labarussias <[email protected]>
falcosecurity · Jun 8, 2023 · cb26002 · cb26002
1 parent 8f70ba3
commit cb26002
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/outputs/smtp.go b/outputs/smtp.go
@@ -136,7 +136,10 @@ func (c *Client) SendMail(falcopayload types.FalcoPayload) {
 		return
 	}
 	if c.Config.SMTP.TLS {
-		tlsCfg := &tls.Config{ServerName: strings.Split(c.Config.SMTP.HostPort, ":")[0]}
+		tlsCfg := &tls.Config{
+			ServerName: strings.Split(c.Config.SMTP.HostPort, ":")[0],
+			MinVersion: tls.VersionTLS12,
+		}
 		if err := smtpClient.StartTLS(tlsCfg); err != nil {
 			c.ReportErr("TLS error", err)
 			return