traces/vendor/github.com/grafana/dskit/server/tls_config.go

// Provenance-includes-location: https://github.com/weaveworks/common/blob/main/server/tls_config.go
// Provenance-includes-license: Apache-2.0
// Provenance-includes-copyright: Weaveworks Ltd.

package server

import (
	"crypto/tls"
	fmt "fmt"
	"strings"

	"github.com/prometheus/exporter-toolkit/web"
)

// Collect all cipher suite names and IDs recognized by Go, including insecure ones.
func allCiphers() map[string]web.Cipher {
	acceptedCiphers := make(map[string]web.Cipher)
	for _, suite := range tls.CipherSuites() {
		acceptedCiphers[suite.Name] = web.Cipher(suite.ID)
	}
	for _, suite := range tls.InsecureCipherSuites() {
		acceptedCiphers[suite.Name] = web.Cipher(suite.ID)
	}
	return acceptedCiphers
}

func stringToCipherSuites(s string) ([]web.Cipher, error) {
	if s == "" {
		return nil, nil
	}
	ciphersSlice := []web.Cipher{}
	possibleCiphers := allCiphers()
	for _, cipher := range strings.Split(s, ",") {
		intValue, ok := possibleCiphers[cipher]
		if !ok {
			return nil, fmt.Errorf("cipher suite %q not recognized", cipher)
		}
		ciphersSlice = append(ciphersSlice, intValue)
	}
	return ciphersSlice, nil
}

// Using the same names that Kubernetes does
var tlsVersions = map[string]uint16{
	"VersionTLS10": tls.VersionTLS10,
	"VersionTLS11": tls.VersionTLS11,
	"VersionTLS12": tls.VersionTLS12,
	"VersionTLS13": tls.VersionTLS13,
}

func stringToTLSVersion(s string) (web.TLSVersion, error) {
	if s == "" {
		return 0, nil
	}
	if version, ok := tlsVersions[s]; ok {
		return web.TLSVersion(version), nil
	}
	return 0, fmt.Errorf("TLS version %q not recognized", s)
}