Improve the TLS settings.

echocat · Jun 19, 2024 · 0093d60 · 0093d60
1 parent e2f7fef
commit 0093d60
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/lingress.go b/lingress.go
@@ -208,6 +208,16 @@ func (this *Lingress) createTlsConfig() (*tls.Config, error) {
 	}
 
 	result := tls.Config{
+		MinVersion: tls.VersionTLS12,
+		CipherSuites: []uint16{
+			tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+			tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+			tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+			tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+			tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+			tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+			tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
+		},
 		Certificates:   []tls.Certificate{},
 		GetCertificate: this.resolveCertificate,
 	}