Please sign your commits following these rules:
https://github.com/moby/moby/blob/master/CONTRIBUTING.md#sign-your-work
The easiest way to do this is to amend the last commit:

$ git clone -b "feat/tls1.2only" git@github.com:gregrebholz/distribution.git somewhere
$ cd somewhere
$ git commit --amend -s --no-edit
$ git push -f

Amending updates the existing PR. You DO NOT need to open a new one.

Codecov Report

Merging #2808 into master will decrease coverage by 0.1%.
The diff coverage is 0%.

@@            Coverage Diff             @@
##           master    #2808      +/-   ##
==========================================
- Coverage   60.25%   60.15%   -0.11%     
==========================================
  Files         103      103              
  Lines        8024     8038      +14     
==========================================
  Hits         4835     4835              
- Misses       2546     2560      +14     
  Partials      643      643

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 91b0f05...cdb62b2. Read the comment docs.

@caervs @manishtomar @gregrebholz It seems lile even though these changes were merged over a year ago, they never got released.

Can someone please look into this? Having TLS1.0 as default in 2021 is a big no.

Thanks!

What version are you using? I see this change was included in release v2.7.1

Don't think it's in v2.7.1; https://github.com/distribution/distribution/blob/v2.7.1/configuration/configuration.go#L107-L114

You're right. Looks like they didn't include latest master when they released 2.7.1. That's unfortunate.

Also, no new releases in 2.5 years.

Looks like they didn't include latest master when they released 2.7.1. That's unfortunate.

Yes, but that's expected; this project uses release branches for releases, and specific bug fixes are cherry-picked to those branches (master/main is used for "release X + 1" (which could be next "major" or "minor" release, depending on changes; currently main is targeting v3.0.0)