From c89cc23938ee79c0b995e6cb32b28970b6c714ba Mon Sep 17 00:00:00 2001
From: Lyas Spiehler <lspiehler@gmail.com>
Date: Tue, 22 Nov 2022 06:18:16 -0600
Subject: [PATCH] add ability to specify the maximum TLS version

Signed-off-by: Lyas Spiehler <lspiehler@gmail.com>
---
 config/http_config.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/http_config.go b/config/http_config.go
index 69c0b671..eb289dfe 100644
--- a/config/http_config.go
+++ b/config/http_config.go
@@ -21,6 +21,7 @@ import (
 	"crypto/x509"
 	"encoding/json"
 	"fmt"
+	"io/ioutil"
 	"net"
 	"net/http"
 	"net/url"
@@ -826,6 +827,8 @@ type TLSConfig struct {
 	InsecureSkipVerify bool `yaml:"insecure_skip_verify" json:"insecure_skip_verify"`
 	// Minimum TLS version.
 	MinVersion TLSVersion `yaml:"min_version,omitempty" json:"min_version,omitempty"`
+	// Maximum TLS version.
+	MaxVersion TLSVersion `yaml:"max_version,omitempty" json:"max_version,omitempty"`
 }
 
 // SetDirectory joins any relative file paths with dir.