Upd Unsave alogrithms removed and deprecated flag disabled

This commit is contained in:
Hannes Tribus 2022-07-29 10:24:10 +02:00
parent 0effe06bfd
commit 4a545c95fd
2 changed files with 8 additions and 15 deletions

View file

@ -152,8 +152,7 @@ func main() {
Addr: opts.httpsAddr,
Handler: server,
TLSConfig: &tls.Config{
MinVersion: tls.VersionTLS12,
PreferServerCipherSuites: true,
MinVersion: tls.VersionTLS12,
},
}
http2.ConfigureServer(s, nil)
@ -193,11 +192,7 @@ func tlsConfig(opts *options) (*tls.Config, error) {
ClientCAs: roots,
SessionTicketsDisabled: true,
MinVersion: tls.VersionTLS12,
CipherSuites: []uint16{
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
PreferServerCipherSuites: true,
NextProtos: []string{"h2"},
NextProtos: []string{"h2"},
}, nil
}

View file

@ -329,14 +329,12 @@ func tlsConfig() *tls.Config {
}
c := &tls.Config{
Certificates: []tls.Certificate{cert},
ClientAuth: tls.RequireAnyClientCert,
SessionTicketsDisabled: true,
InsecureSkipVerify: true,
MinVersion: tls.VersionTLS12,
CipherSuites: []uint16{tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
PreferServerCipherSuites: true,
NextProtos: []string{"h2"},
Certificates: []tls.Certificate{cert},
ClientAuth: tls.RequireAnyClientCert,
SessionTicketsDisabled: true,
InsecureSkipVerify: true,
MinVersion: tls.VersionTLS12,
NextProtos: []string{"h2"},
}
c.BuildNameToCertificate()
return c