Support configuration of TLS min and max versions

[tuminoid]

Preflight Checklist

• I agree to follow the Code of Conduct that this project adheres to.
• I have searched the issue tracker for an issue that matches the one I want to file, without success.

Problem Description

Currently Dex only sets TLS min version to TLS1.2, and leaves negotiation of TLS version to Go and to the connecting client. There is no way to configure Dex to only accept TLS 1.3 for example.

Proposed Solution

Dex should support TLS min and max version configuration via config files and command line arguments like --tls-min-version and --tls-max-version commonly found in other projects, such as etcd (PR) and k8s.

Alternatives Considered

No response

Additional Information

No response

[tuminoid]

Hello maintainers. Any thoughts on this? Is this something Dex would be willing to support or is there generally adopted way of working around this?

[tuminoid]

Implemented in #3303 and released in 2.38.0!