Explicitly check server name in client TLS configuration (#5095)

Signed-off-by: Juan Antonio Osorio <[email protected]>
mindersec · Dec 2, 2024 · 532e3be · 532e3be
1 parent c7b6f8d
commit 532e3be
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/internal/util/helpers.go b/internal/util/helpers.go
@@ -117,7 +117,10 @@ func GetGrpcConnection(
 		}
 	}
 
-	credentialOpts := credentials.NewTLS(&tls.Config{MinVersion: tls.VersionTLS13})
+	credentialOpts := credentials.NewTLS(&tls.Config{
+		MinVersion: tls.VersionTLS13,
+		ServerName: grpc_host,
+	})
 	if allowInsecure {
 		credentialOpts = insecure.NewCredentials()
 	}