Merge pull request #49 from n4ss/delete-rsa-server-ciphers

Vincent Demeester · web-flow · commit b7274b134e46 · 2018-02-26T17:26:06.000+01:00
Remove TLS_RSA ciphers from the default accepted cipher suite
diff --git a/tlsconfig/config.go b/tlsconfig/config.go
@@ -46,8 +46,6 @@ var acceptedCBCCiphers = []uint16{
 	tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
 	tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
 	tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
-	tls.TLS_RSA_WITH_AES_256_CBC_SHA,
-	tls.TLS_RSA_WITH_AES_128_CBC_SHA,
 }
 
 // DefaultServerAcceptedCiphers should be uses by code which already has a crypto/tls

Original file line number	Diff line number	Diff line change
`@@ -46,8 +46,6 @@ var acceptedCBCCiphers = []uint16{`
`46`	`46`	`tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,`
`47`	`47`	`tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,`
`48`	`48`	`tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,`
`49`		`- tls.TLS_RSA_WITH_AES_256_CBC_SHA,`
`50`		`- tls.TLS_RSA_WITH_AES_128_CBC_SHA,`
`51`	`49`	`}`
`52`	`50`
`53`	`51`	`// DefaultServerAcceptedCiphers should be uses by code which already has a crypto/tls`