From 26cec668e6da07163c9bb234dad32db4c4677dca Mon Sep 17 00:00:00 2001
From: Jonathon Anderson <janderson@ciq.com>
Date: Tue, 17 Feb 2026 14:12:11 -0700
Subject: [PATCH] Set an explicit minimum TLS version

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
---
 internal/app/wwclient/root.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/app/wwclient/root.go b/internal/app/wwclient/root.go
index b14c0279..9467c931 100644
--- a/internal/app/wwclient/root.go
+++ b/internal/app/wwclient/root.go
@@ -116,7 +116,7 @@ func CobraRunE(cmd *cobra.Command, args []string) (err error) {
 		wwlog.Info("running from trusted port: %d", localTCPAddr.Port)
 	}
 
-	tlsConfig := &tls.Config{}
+	tlsConfig := &tls.Config{MinVersion: tls.VersionTLS13}
 	if conf.Warewulf.EnableTLS() {
 		caCert, err := os.ReadFile("/warewulf/tls/warewulf.crt")
 		if err != nil {