Specify tls cipher suites

Co-authored-by: Mridul Seth <mail@mriduls.com>
This commit is contained in:
Min RK
2023-05-16 21:12:10 +02:00
committed by GitHub
parent 59648b79d4
commit aee707c68c

View File

@@ -4,7 +4,14 @@
[tls] [tls]
[tls.options.default] [tls.options.default]
minVersion = "VersionTLS12" minVersion = "VersionTLS12"
cipherSuites = [
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
]
{% if https['tls']['cert'] -%} {% if https['tls']['cert'] -%}
[tls.stores.default.defaultCertificate] [tls.stores.default.defaultCertificate]
certFile = "{{ https['tls']['cert'] }}" certFile = "{{ https['tls']['cert'] }}"