Merge pull request #41740 from hashicorp/restore-godebug-tlskyber=0

ewbankkit · web-flow · commit c051292de27e · 2025-03-10T10:38:40.000-04:00
Restore `godebug tlskyber=0`
diff --git a/.changelog/41740.txt b/.changelog/41740.txt
@@ -0,0 +1,3 @@
+```release-note:note
+provider: Restore the `godebug tlskyber=0` directive in `go.mod`. This disables the experimental the post-quantum key exchange mechanism `X25519Kyber768Draft00`, fixing failed or hanging network connections to various AWS services. This fixes a regression introduced in [v5.90.0](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5900-march--6-2025)
+```
diff --git a/go.mod b/go.mod
@@ -2,6 +2,10 @@ module github.com/hashicorp/terraform-provider-aws
 
 go 1.23.7
 
+// Disable experimental post-quantum key exchange mechanism X25519Kyber768Draft00
+// This was causing errors with AWS Network Firewall
+godebug tlskyber=0
+
 require (
 	github.com/ProtonMail/go-crypto v1.1.6
 	github.com/YakDriver/go-version v0.1.0

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	+```release-note:note
	`2`	+provider: Restore the `godebug tlskyber=0` directive in `go.mod`. This disables the experimental the post-quantum key exchange mechanism `X25519Kyber768Draft00`, fixing failed or hanging network connections to various AWS services. This fixes a regression introduced in [v5.90.0](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5900-march--6-2025)
	`3`	+```