Neil Twigg afc9faa381 Use cipher suites from crypto/tls, add allow_insecure_cipher_suites option ...

This PR makes the following changes:

* We will now automatically be able to configure new ciphers added to `crypto/tls`
  by name without having to manually update our own configuration maps
* Added a new `allow_insecure_cipher_suites` option to the `tls` block to allow
  configuring cipher suites that are known to be broken/insecure if needed
* Error when configuring an insecure cipher suite when `allow_insecure_cipher_suites`
  is not set

Signed-off-by: Neil Twigg <[email protected]>

2025-08-04 15:06:09 +01:00

..

certs

Add tls benchmarking configs with certs and keys

2023-08-23 18:11:27 -04:00

reload

[FIXED] Validate default_sentinel JWT is bearer

2025-07-21 15:56:14 +02:00

tls

Use dynamic port number in benchmark

2023-09-01 12:58:52 -07:00

accounts.conf

[ADDED] Distributed Message Tracing (#5014)

2024-02-08 10:59:58 -08:00

authorization.conf

Allow dynamic publish permissions based on reply subjects of received msgs

2019-07-25 13:17:26 -07:00

cluster.conf

(2.12) Exponential backoff opt-in

2025-07-11 10:48:44 +02:00

gwa.conf

Gateways: Ignore reference to self

2018-11-28 14:24:28 -07:00

gwb.conf

Gateways: Ignore reference to self

2018-11-28 14:24:28 -07:00

gws.conf

Gateways: Ignore reference to self

2018-11-28 14:24:28 -07:00

include_bad_conf_check_a.conf

Add -t pedantic config check to the server

2018-09-11 16:06:53 -07:00

include_bad_conf_check_b.conf

Config reporting with line and error position

2018-10-02 11:38:15 -07:00

include_conf_check_a.conf

Add -t pedantic config check to the server

2018-09-11 16:06:53 -07:00

include_conf_check_b.conf

Config reporting with line and error position

2018-10-02 11:38:15 -07:00

include_conf_check_c.conf

Add -t pedantic config check to the server

2018-09-11 16:06:53 -07:00

js-op.conf

Declare required JetStream resources in test

2021-04-16 15:21:35 -07:00

listen_port_with_colon.conf

Update license to Apache 2

2018-03-15 22:31:07 -07:00

listen_port.conf

Update license to Apache 2

2018-03-15 22:31:07 -07:00

listen-1.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

listen.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

malformed_cluster_address.conf

Update license to Apache 2

2018-03-15 22:31:07 -07:00

malformed_listen_address.conf

Update license to Apache 2

2018-03-15 22:31:07 -07:00

multiple_errors.conf

Collecting all config errors then flush before exit

2018-10-16 13:29:29 -07:00

multiple_users.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

new_style_authorization.conf

Update SYS account name

2019-09-04 13:49:59 -05:00

one.creds

In operator mode with JetStream we want to load accounts that have stable storage.

2021-03-20 06:53:13 -07:00

seed_tls.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

seed.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

srv_a_bcrypt.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

srv_a.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

srv_b_bcrypt.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

srv_b.conf

Cluster names are now required.

2020-06-12 15:48:38 -07:00

test.conf

(2.12) Server Metadata parsing

2025-07-03 12:44:14 +02:00

tls_bad_cipher.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

tls_bad_curve_prefs.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

tls_ciphers.conf

Use cipher suites from crypto/tls, add allow_insecure_cipher_suites option

2025-08-04 15:06:09 +01:00

tls_curve_prefs.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

tls_empty_cipher.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

tls_empty_curve_prefs.conf

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

tls_insecure_ciphers_allowed.conf

Use cipher suites from crypto/tls, add allow_insecure_cipher_suites option

2025-08-04 15:06:09 +01:00

tls_insecure_ciphers.conf

Use cipher suites from crypto/tls, add allow_insecure_cipher_suites option

2025-08-04 15:06:09 +01:00

tls.conf

[fixed] tls timeout now accepts units

2021-07-19 11:42:28 -04:00