Remove TLS_RSA ciphers from the default accepted ciphers - weak & triggers scanning warnings

n4ss · n4ss · commit 504272c57f01 · 2018-02-21T14:04:42.000-08:00
Signed-off-by: Nassim 'Nass' Eddequiouaq &lt;eddequiouaq.nassim@gmail.com&gt;
diff --git a/tlsconfig/config.go b/tlsconfig/config.go
@@ -46,8 +46,6 @@ var acceptedCBCCiphers = []uint16{
 	tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
 	tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
 	tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
-	tls.TLS_RSA_WITH_AES_256_CBC_SHA,
-	tls.TLS_RSA_WITH_AES_128_CBC_SHA,
 }
 
 // DefaultServerAcceptedCiphers should be uses by code which already has a crypto/tls

Original file line number	Diff line number	Diff line change
`@@ -46,8 +46,6 @@ var acceptedCBCCiphers = []uint16{`
`46`	`46`	`tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,`
`47`	`47`	`tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,`
`48`	`48`	`tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,`
`49`		`- tls.TLS_RSA_WITH_AES_256_CBC_SHA,`
`50`		`- tls.TLS_RSA_WITH_AES_128_CBC_SHA,`
`51`	`49`	`}`
`52`	`50`
`53`	`51`	`// DefaultServerAcceptedCiphers should be uses by code which already has a crypto/tls`