[PR #3976] [CLOSED] Update tls.go #4878

New issue

Closed

opened 2026-05-05 14:50:28 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 14:50:28 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fatedier/frp/pull/3976
Author: @zgh419566
Created: 2/6/2024
Status: ❌ Closed

Base: master ← Head: patch-1

📝 Commits (1)

f7e3b95 Update tls.go

📊 Changes

1 file changed (+50 additions, -0 deletions)

View changed files

📝 pkg/transport/tls.go (+50 -0)

📄 Description

force frp use tls1.2 only when set TLS mode
avoid to use 3des algorithm

64-bit block cipher 3DES vulnerable to SWEET32 attack

user can scan it by nmap below:
nmap -sV -p 7000 --script ssl-enum-ciphers x.x.x.x

CVE-2016-2183

reference:
https://github.com/fatedier/frp/issues/3973

https://stackoverflow.com/questions/31226131/how-to-set-tls-cipher-for-go-server

https://www.cnblogs.com/stjwy/p/17286010.html

WHY

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fatedier/frp/pull/3976 **Author:** [@zgh419566](https://github.com/zgh419566) **Created:** 2/6/2024 **Status:** ❌ Closed **Base:** `master` ← **Head:** `patch-1` --- ### 📝 Commits (1) - [`f7e3b95`](https://github.com/fatedier/frp/commit/f7e3b951b51c9a2a848a47154c68383fb9b6d35d) Update tls.go ### 📊 Changes **1 file changed** (+50 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `pkg/transport/tls.go` (+50 -0) </details> ### 📄 Description force frp use tls1.2 only when set TLS mode avoid to use 3des algorithm 64-bit block cipher 3DES vulnerable to SWEET32 attack user can scan it by nmap below: nmap -sV -p 7000 --script ssl-enum-ciphers x.x.x.x CVE-2016-2183 reference: https://github.com/fatedier/frp/issues/3973 https://stackoverflow.com/questions/31226131/how-to-set-tls-cipher-for-go-server https://www.cnblogs.com/stjwy/p/17286010.html ### WHY  --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>