Improve crypto/tls security settings

This commit is contained in:
Jan Eitzinger 2022-06-17 10:08:31 +02:00
parent 8b0ad6efd1
commit e403e55292

View File

@ -446,6 +446,12 @@ func main() {
} }
listener = tls.NewListener(listener, &tls.Config{ listener = tls.NewListener(listener, &tls.Config{
Certificates: []tls.Certificate{cert}, Certificates: []tls.Certificate{cert},
CipherSuites: []uint16{
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
},
MinVersion: tls.VersionTLS12,
PreferServerCipherSuites: true,
}) })
log.Printf("HTTPS server listening at %s...", programConfig.Addr) log.Printf("HTTPS server listening at %s...", programConfig.Addr)
} else { } else {