Skip to content

Enhancement: Add include_insecure_cipher_suites to configtls to enable insecure cipher suites#14043

Merged
codeboten merged 10 commits into
open-telemetry:mainfrom
vignesh-codes:feature/configtls-insecure-cipher-suites
May 28, 2026
Merged

Enhancement: Add include_insecure_cipher_suites to configtls to enable insecure cipher suites#14043
codeboten merged 10 commits into
open-telemetry:mainfrom
vignesh-codes:feature/configtls-insecure-cipher-suites

Conversation

@vignesh-codes

Copy link
Copy Markdown
Contributor

Description

Enhancement: Add include_insecure_cipher_suites to configtls to enable insecure cipher suites. Insecure cipher suites are disabled by default for security

Link to tracking issue

Fixes #13829

Testing

Added TestInsecureCipherSuites

Documentation

Updated config/configtls/README.md

@vignesh-codes
vignesh-codes requested a review from a team as a code owner October 20, 2025 02:31
@codecov

codecov Bot commented Oct 20, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.27%. Comparing base (0093005) to head (3640768).

Additional details and impacted files
@@           Coverage Diff           @@
##             main   #14043   +/-   ##
=======================================
  Coverage   91.27%   91.27%           
=======================================
  Files         709      709           
  Lines       46218    46221    +3     
=======================================
+ Hits        42186    42189    +3     
  Misses       2817     2817           
  Partials     1215     1215           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@vignesh-codes

vignesh-codes commented Nov 1, 2025

Copy link
Copy Markdown
Contributor Author

@TylerHelmuth Waiting for the reviews. Thanks :)

@github-actions

Copy link
Copy Markdown
Contributor

This PR was marked stale due to lack of activity. It will be closed in 14 days.

@github-actions github-actions Bot added the Stale label Nov 16, 2025
@vignesh-codes

Copy link
Copy Markdown
Contributor Author

@TylerHelmuth @codeboten waiting for reviews. thanks :)

@github-actions github-actions Bot removed the Stale label Nov 18, 2025
Comment thread config/configtls/configtls.go
@github-actions

Copy link
Copy Markdown
Contributor

This PR was marked stale due to lack of activity. It will be closed in 14 days.

@github-actions github-actions Bot added Stale and removed Stale labels Dec 11, 2025
@dentonk

dentonk commented Dec 15, 2025

Copy link
Copy Markdown

Hey Team, looks like we're super close to the finish line. Hoping we can close this out. @atoulme, how do you feel about the reasoning above for adding the flag? Thanks y'all!

@github-actions

Copy link
Copy Markdown
Contributor

This PR was marked stale due to lack of activity. It will be closed in 14 days.

@github-actions github-actions Bot added Stale and removed Stale labels Jan 24, 2026
@github-actions

Copy link
Copy Markdown
Contributor

This PR was marked stale due to lack of activity. It will be closed in 14 days.

@github-actions github-actions Bot added the Stale label Feb 14, 2026
@dentonk

dentonk commented Feb 16, 2026

Copy link
Copy Markdown

Hey @vignesh-codes looks like there's a lingering test failing. I'm hopeful if you can get that resolved we can get this across the line. Would love to see this wrapped up. Thanks!!

@github-actions github-actions Bot removed the Stale label Feb 21, 2026
@vignesh-codes

Copy link
Copy Markdown
Contributor Author

@dentonk looks like the benchmarks tests are timing out.
I believe its an issue happening with other PRs as well.

@dentonk dentonk left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@github-actions

Copy link
Copy Markdown
Contributor

This PR was marked stale due to lack of activity. It will be closed in 14 days.

@jade-guiton-dd jade-guiton-dd left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nothing has changed since my last review, so I can't approve much more than I already have. You'll have to ping some maintainers to get it merged.

@jade-guiton-dd jade-guiton-dd added ready-to-merge Code review completed; ready to merge by maintainers area:config labels Apr 15, 2026
@github-actions github-actions Bot removed the Stale label Apr 18, 2026
@codeboten
codeboten enabled auto-merge April 29, 2026 20:31
@codspeed-hq

codspeed-hq Bot commented Apr 29, 2026

Copy link
Copy Markdown

Merging this PR will improve performance by 86.43%

⚠️ Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 2 improved benchmarks
✅ 5 untouched benchmarks

Performance Changes

Benchmark BASE HEAD Efficiency
BenchmarkHTTPProtoLogsSequential 4.7 ms 2.5 ms +82.99%
BenchmarkGRPCLogsSequential 5.6 ms 3 ms +89.93%

Tip

Curious why this is faster? Comment @codspeedbot explain why this is faster on this PR, or directly use the CodSpeed MCP with your agent.


Comparing vignesh-codes:feature/configtls-insecure-cipher-suites (3640768) with main (0093005)

Open in CodSpeed

@jade-guiton-dd

jade-guiton-dd commented Apr 30, 2026

Copy link
Copy Markdown
Member

I think some of those test failures may come from main, but:

./config/configtls/README.md:88:1 error MD050/strong-style Strong style [Expected: underscore; Actual: asterisk]
./config/configtls/README.md:88:10 error MD050/strong-style Strong style [Expected: underscore; Actual: asterisk]

seems to be something to fix.

@codeboten codeboten left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please address the comments from @jade-guiton-dd, we can get this merged asap

@codeboten codeboten removed the ready-to-merge Code review completed; ready to merge by maintainers label May 13, 2026
auto-merge was automatically disabled May 14, 2026 12:55

Head branch was pushed to by a user without write access

@vignesh-codes

Copy link
Copy Markdown
Contributor Author

@jade-guiton-dd @codeboten I pushed the suggested fixes. Apologies for the delay. Totally forgot about this pr

@jade-guiton-dd jade-guiton-dd left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good to merge.

(The remaining failure in check-links seems to be with an existing link, and the checker seems to be straight up wrong about the fragment not existing?)

@jade-guiton-dd jade-guiton-dd added the ready-to-merge Code review completed; ready to merge by maintainers label May 18, 2026
@codeboten
codeboten enabled auto-merge May 28, 2026 14:45
@codeboten
codeboten added this pull request to the merge queue May 28, 2026
Merged via the queue into open-telemetry:main with commit fe2cf23 May 28, 2026
67 of 68 checks passed
@otelbot

otelbot Bot commented May 28, 2026

Copy link
Copy Markdown
Contributor

Thank you for your contribution @vignesh-codes! 🎉 We would like to hear from you about your experience contributing to OpenTelemetry by taking a few minutes to fill out this survey.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:config ready-to-merge Code review completed; ready to merge by maintainers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add opt-in support for insecure cipher suites in TLS config

6 participants