parent
666ed34059
commit
a947767339
@ -1,24 +0,0 @@ |
|||||||
package httpserver |
|
||||||
|
|
||||||
import "crypto/tls" |
|
||||||
|
|
||||||
func getDefaultTLSConfig() *tls.Config { |
|
||||||
config := tls.Config{} |
|
||||||
|
|
||||||
//Use only modern ciphers
|
|
||||||
config.CipherSuites = []uint16{ |
|
||||||
tls.TLS_RSA_WITH_AES_128_CBC_SHA, |
|
||||||
tls.TLS_RSA_WITH_AES_256_CBC_SHA, |
|
||||||
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, |
|
||||||
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, |
|
||||||
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, |
|
||||||
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, |
|
||||||
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, |
|
||||||
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, |
|
||||||
} |
|
||||||
|
|
||||||
//Don't allow session resumption
|
|
||||||
config.SessionTicketsDisabled = true |
|
||||||
config.ClientAuth = tls.RequireAnyClientCert |
|
||||||
return &config |
|
||||||
} |
|
Loading…
Reference in new issue