Revert 5d4c3873fd due to issue #70 on GitHub. Lock the min TLS version to 1.2 instead

This commit is contained in:
NI
2021-12-23 12:34:21 +08:00
parent c16f1f9cde
commit 366be28325

View File

@@ -88,15 +88,10 @@ func (s Server) Serve(
ssCfg := serverCfg.WithDefault() ssCfg := serverCfg.WithDefault()
l := s.logger.Context( l := s.logger.Context(
"Server (%s:%d)", ssCfg.ListenInterface, ssCfg.ListenPort) "Server (%s:%d)", ssCfg.ListenInterface, ssCfg.ListenPort)
cipherSuites := tls.CipherSuites() // only return secure ciphers
selectedCipherSuites := make([]uint16, 0, len(cipherSuites))
for _, s := range cipherSuites {
selectedCipherSuites = append(selectedCipherSuites, s.ID)
}
ss := &Serving{ ss := &Serving{
server: http.Server{ server: http.Server{
Handler: handlerBuilder(commonCfg, ssCfg, l), Handler: handlerBuilder(commonCfg, ssCfg, l),
TLSConfig: &tls.Config{CipherSuites: selectedCipherSuites}, TLSConfig: &tls.Config{MinVersion: tls.VersionTLS12},
ReadTimeout: ssCfg.ReadTimeout, ReadTimeout: ssCfg.ReadTimeout,
ReadHeaderTimeout: ssCfg.InitialTimeout, ReadHeaderTimeout: ssCfg.InitialTimeout,
WriteTimeout: ssCfg.WriteTimeout, WriteTimeout: ssCfg.WriteTimeout,