mirror of
https://github.com/hanzoai/pubsub.git
synced 2026-10-30 15:06:26 +00:00
Neil Twigg
61636f634e
This PR makes the following changes: * We will now automatically be able to configure new ciphers added to `crypto/tls` by name without having to manually update our own configuration maps * Added a new `allow_insecure_cipher_suites` option to the `tls` block to allow configuring cipher suites that are known to be broken/insecure if needed * Error when configuring an insecure cipher suite when `allow_insecure_cipher_suites` is not set Signed-off-by: Neil Twigg <[email protected]>
24 lines
492 B
Plaintext
24 lines
492 B
Plaintext
# Simple TLS config file
|
|
|
|
listen: 127.0.0.1:4443
|
|
|
|
tls {
|
|
cert_file: "./configs/certs/server.pem"
|
|
key_file: "./configs/certs/key.pem"
|
|
timeout: 2
|
|
cipher_suites: [
|
|
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
|
|
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
|
|
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
|
|
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
|
|
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
|
|
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
|
|
]
|
|
}
|
|
|
|
authorization {
|
|
user: derek
|
|
password: monkey
|
|
timeout: 1
|
|
}
|