Confirmed users
529
edits
Security/Server Side TLS: Difference between revisions
→Recommended Server Configurations
| Line 479: | Line 479: | ||
1) Cipher Name: MozillaSecure Description: User Created Cipher Group | 1) Cipher Name: MozillaSecure Description: User Created Cipher Group | ||
</pre> | </pre> | ||
== Go == | |||
The Go standard library supports TLS1.2 and a limited subset of ECDHE and GCM ciphers. To configure a Go program accepting TLS connections, use the following code: | |||
<source lang="python"> | |||
config := tls.Config{ | |||
MinVersion: tls.VersionTLS10, | |||
PreferServerCipherSuites: true, | |||
CipherSuites: []uint16{ | |||
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, | |||
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, | |||
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, | |||
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, | |||
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, | |||
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, | |||
tls.TLS_RSA_WITH_AES_128_CBC_SHA, | |||
tls.TLS_RSA_WITH_AES_256_CBC_SHA, | |||
tls.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, | |||
tls.TLS_RSA_WITH_3DES_EDE_CBC_SHA}, | |||
} | |||
</source> | |||
= CipherScan = | = CipherScan = | ||