default the CloudFront TLS version to the latest recommended: TLSv1.2_2019

This commit is contained in:
Egor 2020-08-03 22:44:08 -07:00
parent 53ffdfc4ee
commit a4825660db
3 changed files with 3 additions and 3 deletions

View file

@ -247,7 +247,7 @@ All engines support the basic options:
| ---------------------- | -------- | -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | ---------------------- | -------- | -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| ACMCertificateArn | `string` | `null` | If the SSL/TLS certificate is stored in ACM, provide the ARN of the ACM certificate. CloudFront only supports ACM certificates in the us-east-1. | | ACMCertificateArn | `string` | `null` | If the SSL/TLS certificate is stored in ACM, provide the ARN of the ACM certificate. CloudFront only supports ACM certificates in the us-east-1. |
| SSLSupportMethod | `string` | `sni-only` | Specifies which viewers the distribution accepts HTTPS connections from. **sni-only** The distribution accepts HTTPS connections only from viewers that support server SNI (all modern browsers). **vip** The distribution accepts HTTPS connections from **all** (not recommended and results in additional monthly charges). | | SSLSupportMethod | `string` | `sni-only` | Specifies which viewers the distribution accepts HTTPS connections from. **sni-only** The distribution accepts HTTPS connections only from viewers that support server SNI (all modern browsers). **vip** The distribution accepts HTTPS connections from **all** (not recommended and results in additional monthly charges). |
| minimumProtocolVersion | `string` | `TLSv1.2_2018` | The security policy that you want to use for HTTPS connections with viewers. | | minimumProtocolVersion | `string` | `TLSv1.2_2019` | The security policy that you want to use for HTTPS connections with viewers. |
#### LambdaAtEdge #### LambdaAtEdge

View file

@ -1,6 +1,6 @@
{ {
"name": "next-deploy", "name": "next-deploy",
"version": "1.2.0", "version": "1.2.1",
"description": "Effortless deployment for Next.js apps 🚀", "description": "Effortless deployment for Next.js apps 🚀",
"author": "Nidratech Ltd. <egor@nidratech.com>", "author": "Nidratech Ltd. <egor@nidratech.com>",
"keywords": [ "keywords": [

View file

@ -4,7 +4,7 @@ import { utils } from '@serverless/core';
import { PathPatternConfig } from '@next-deploy/aws-cloudfront/types'; import { PathPatternConfig } from '@next-deploy/aws-cloudfront/types';
import { AwsDomainInputs, SubDomain, DomainType } from '../types'; import { AwsDomainInputs, SubDomain, DomainType } from '../types';
const DEFAULT_MINIMUM_PROTOCOL_VERSION = 'TLSv1.2_2018'; const DEFAULT_MINIMUM_PROTOCOL_VERSION = 'TLSv1.2_2019';
const HOSTED_ZONE_ID = 'Z2FDTNDATAQYW2'; // this is a constant that you can get from here https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-aliastarget.html const HOSTED_ZONE_ID = 'Z2FDTNDATAQYW2'; // this is a constant that you can get from here https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-aliastarget.html
/** /**