Merge pull request #2827 from liggitt/tlsv1

Bump minimum TLS version from SSLv3 to TLSv1.0

pkg/client/transport.go

@@ -68,6 +68,8 @@ func NewClientCertTLSTransport(certFile, keyFile, caFile string) (*http.Transpor
 	certPool.AppendCertsFromPEM(data)
 	return &http.Transport{
 		TLSClientConfig: &tls.Config{
+			// Change default from SSLv3 to TLSv1.0 (because of POODLE vulnerability)
+			MinVersion: tls.VersionTLS10,
 			Certificates: []tls.Certificate{
 				cert,
 			},