diff options
| author | Guillaume Destuynder <gdestuynder@mozilla.com> | 2015-06-01 13:55:17 -0700 |
|---|---|---|
| committer | Guillaume Destuynder <gdestuynder@mozilla.com> | 2015-06-01 13:55:17 -0700 |
| commit | e198f55c0b07fb88b36533840cb27e3c9987395f (patch) | |
| tree | 230205c834e58eb84d36a7b7d3a9e8db98570f44 | |
| parent | 4534676e8913e65537a711192751e98a8e00a8dd (diff) | |
| download | server-side-tls-e198f55c0b07fb88b36533840cb27e3c9987395f.zip server-side-tls-e198f55c0b07fb88b36533840cb27e3c9987395f.tar.gz server-side-tls-e198f55c0b07fb88b36533840cb27e3c9987395f.tar.bz2 | |
Change Golang orderingorigin/gdestuynder-patch-1
ECDSA on top, and AES128 before AES256 as per https://wiki.mozilla.org/Security/Server_Side_TLS#Prioritization_logic (4)
| -rw-r--r-- | Server_Side_TLS.mediawiki | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/Server_Side_TLS.mediawiki b/Server_Side_TLS.mediawiki index 8a4d37f..8192cb4 100644 --- a/Server_Side_TLS.mediawiki +++ b/Server_Side_TLS.mediawiki @@ -564,12 +564,12 @@ The Go standard library supports TLS1.2 and a limited subset of ECDHE and GCM ci MinVersion: tls.VersionTLS10, PreferServerCipherSuites: true, CipherSuites: []uint16{ - tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, + tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, + tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, + tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, - tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, - tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, tls.TLS_RSA_WITH_AES_128_CBC_SHA, tls.TLS_RSA_WITH_AES_256_CBC_SHA, tls.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, |