Enforce a TLS 1.3 floor

Proprietary

Rewrites JSSE, BouncyCastle and Spring Boot protocol configuration to a TLS 1.3 floor across Java, .properties and YAML sources, so that JEP 527 hybrid key exchange — which exists for TLS 1.3 only — can negotiate. Surfaces that cannot be rewritten safely are recorded as Report only rows rather than changed.

io.moderne.cryptography.pqc.EnforceTls13
mod run . --recipe=io.moderne.cryptography.pqc.EnforceTls13

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.

Recipe list

It runs these recipes, in this order.

  1. Enforce a TLS 1.3 floor in Java sources
  2. Enforce a TLS 1.3 floor in properties files
  3. Enforce a TLS 1.3 floor in YAML files