ClusterCockpit/cc-backend
1
0
Fork 0
mirror of https://github.com/ClusterCockpit/cc-backend synced 2025-11-04 09:35:07 +01:00
Code Issues Packages Releases Activity

Improve crypto/tls security settings

Browse Source
This commit is contained in:
Jan Eitzinger
2022-06-17 10:08:31 +02:00
parent 8b0ad6efd1
commit e403e55292
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
server.go
View File

@@ -446,6 +446,12 @@ func main() {
} }
listener = tls.NewListener(listener, &tls.Config{ listener = tls.NewListener(listener, &tls.Config{
Certificates: []tls.Certificate{cert}, Certificates: []tls.Certificate{cert},
CipherSuites: []uint16{
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
},
MinVersion: tls.VersionTLS12,
PreferServerCipherSuites: true,
}) })
log.Printf("HTTPS server listening at %s...", programConfig.Addr) log.Printf("HTTPS server listening at %s...", programConfig.Addr)
} else { } else {