PEM-2613: Update cipher suit (#116)

spectrocloud · Aug 8, 2023 · 9884018 · 9884018
1 parent 504dc45
commit 9884018
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/util/flags/tls.go b/util/flags/tls.go
@@ -80,8 +80,9 @@ func GetTLSOptionOverrideFuncs(options TLSOptions) ([]func(*tls.Config), error)
 
 func GetDefaultTLSCipherSuits() []uint16 {
  return []uint16{
- tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
- tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
- tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
+ tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+ tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+ tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+ tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
  }
 }