From c46bf93808c20ba6013541fadd5d42d040d46c2c Mon Sep 17 00:00:00 2001
From: Dmitry Rodionov <dmitry@neon.tech>
Date: Thu, 26 May 2022 12:06:05 +0300
Subject: [PATCH] allow TLS 1.2 in proxy to be compatible with older client
 libraries

---
 proxy/src/config.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/proxy/src/config.rs b/proxy/src/config.rs
index 077a07beb9..6f1b56bfe4 100644
--- a/proxy/src/config.rs
+++ b/proxy/src/config.rs
@@ -61,7 +61,8 @@ pub fn configure_tls(key_path: &str, cert_path: &str) -> anyhow::Result<TlsConfi
     let config = rustls::ServerConfig::builder()
         .with_safe_default_cipher_suites()
         .with_safe_default_kx_groups()
-        .with_protocol_versions(&[&rustls::version::TLS13])?
+        // allow TLS 1.2 to be compatible with older client libraries
+        .with_protocol_versions(&[&rustls::version::TLS13, &rustls::version::TLS12])?
         .with_no_client_auth()
         .with_single_cert(cert_chain, key)?;