perso/syncthing-arm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Never use crappy cipher suites (fixes #945)

Browse Source
This commit is contained in:
Jakob Borg
2014-11-12 10:47:34 +01:00
parent c959f59581
commit 1795e0a290
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
cmd/syncthing/main.go
View File

@@ -441,6 +441,14 @@ func syncthingMain() {
SessionTicketsDisabled: true, SessionTicketsDisabled: true,
InsecureSkipVerify: true, InsecureSkipVerify: true,
MinVersion: tls.VersionTLS12, MinVersion: tls.VersionTLS12,
CipherSuites: []uint16{
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
},
} }
// If the read or write rate should be limited, set up a rate limiter for it. // If the read or write rate should be limited, set up a rate limiter for it.