Adjusted tls versions and ciphers

cego · Apr 17, 2023 · a1ac43f · a1ac43f
1 parent 7d51843
commit a1ac43f
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/server/server.go b/server/server.go
@@ -180,6 +180,15 @@ func (s *server) startHttpsServer(dataDir string) error {
 
 	httpsSrv.TLSConfig = tlsConfig
 	httpsSrv.TLSConfig.ClientAuth = tls.RequestClientCert
+	httpsSrv.TLSConfig.MinVersion = tls.VersionTLS12
+	httpsSrv.TLSConfig.CipherSuites = []uint16{
+		tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+		tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+		tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+		tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+		tls.TLS_AES_256_GCM_SHA384,
+		tls.TLS_CHACHA20_POLY1305_SHA256,
+	}
 
 	go func() {
 		if err := httpsSrv.ListenAndServeTLS("", ""); err != nil {