Revert 5d4c3873fd due to issue #70 on GitHub. Lock the min TLS version to 1.2 instead
This commit is contained in:
@@ -88,15 +88,10 @@ func (s Server) Serve(
|
|||||||
ssCfg := serverCfg.WithDefault()
|
ssCfg := serverCfg.WithDefault()
|
||||||
l := s.logger.Context(
|
l := s.logger.Context(
|
||||||
"Server (%s:%d)", ssCfg.ListenInterface, ssCfg.ListenPort)
|
"Server (%s:%d)", ssCfg.ListenInterface, ssCfg.ListenPort)
|
||||||
cipherSuites := tls.CipherSuites() // only return secure ciphers
|
|
||||||
selectedCipherSuites := make([]uint16, 0, len(cipherSuites))
|
|
||||||
for _, s := range cipherSuites {
|
|
||||||
selectedCipherSuites = append(selectedCipherSuites, s.ID)
|
|
||||||
}
|
|
||||||
ss := &Serving{
|
ss := &Serving{
|
||||||
server: http.Server{
|
server: http.Server{
|
||||||
Handler: handlerBuilder(commonCfg, ssCfg, l),
|
Handler: handlerBuilder(commonCfg, ssCfg, l),
|
||||||
TLSConfig: &tls.Config{CipherSuites: selectedCipherSuites},
|
TLSConfig: &tls.Config{MinVersion: tls.VersionTLS12},
|
||||||
ReadTimeout: ssCfg.ReadTimeout,
|
ReadTimeout: ssCfg.ReadTimeout,
|
||||||
ReadHeaderTimeout: ssCfg.InitialTimeout,
|
ReadHeaderTimeout: ssCfg.InitialTimeout,
|
||||||
WriteTimeout: ssCfg.WriteTimeout,
|
WriteTimeout: ssCfg.WriteTimeout,
|
||||||
|
|||||||
Reference in New Issue
Block a user