Specify that https agents must use at least TLSv1.1 (#1951)

Author: Robiathin

.changeset/tall-crabs-enjoy.md

@@ -0,0 +1,5 @@
+---
+"ggt": patch
+---
+
+Restrict SSL/TLS to require TLSv1.1 or better. SSLv3 will no longer be supported.

src/services/http/http.ts

@@ -35,7 +35,10 @@ const getContext = (options: HttpOptions): Context => {
 export const http = got.extend({
   agent: {
     http: new HttpAgent({ keepAlive: true }),
-    https: new HttpsAgent({ keepAlive: true }),
+    https: new HttpsAgent({
+      keepAlive: true,
+      minVersion: "TLSv1.1",
+    }),
   },
   retry: {
     limit: 10,