Skip to content

Enable TLS 1.3 on the WS client for Overpass API requests - #1302

Merged
CollinBeczak merged 1 commit into
mainfrom
fix-overpass-api-rejection-issue
Oct 28, 2026
Merged

CollinBeczak merged 1 commit into
mainfrom
fix-overpass-api-rejection-issue

Conversation

@CollinBeczak

Copy link
Copy Markdown
Contributor

Overpass API endpoints have tightened their connection requirements, and outbound requests from the backend's Play WS client can fail during the TLS handshake. This sets TLS 1.3 as the WS client's preferred protocol, with TLS 1.2 still allowed as a fallback.

This is the error i was seeing and why i made the change. I didnt find anything online that said TLS requirements changed.
Screenshot 2026-10-28 at 12 45 25 PM

@sonarqubecloud

Copy link
Copy Markdown

@CollinBeczak
CollinBeczak requested a review from jake-low October 28, 2026 17:50

@jake-low jake-low left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was super confused by this PR until I realized that WS in Play doesn't refer to WebSockets but to "Web Services", the default HTTP client. What a terrible name. 🙃

Anyway, LGTM. Hopefully this fixes the Overpass API issue; even if it does not, defaulting to TLS v1.3 and only using v1.2 as a fallback is a better behavior for all outbound HTTP requests we make.

@CollinBeczak
CollinBeczak marked this pull request as ready for review October 28, 2026 18:48
@CollinBeczak
CollinBeczak merged commit b2841d7 into main Oct 28, 2026
5 checks passed
@CollinBeczak
CollinBeczak deleted the fix-overpass-api-rejection-issue branch October 28, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants