remove cipher suites and default to tls1.3

neicnordic · Jan 23, 2024 · 8c2f7c3 · 8c2f7c3
1 parent 7e9802b
commit 8c2f7c3
Showing 1 changed file with 2 additions and 6 deletions.
diff --git a/api/api.go b/api/api.go
@@ -50,12 +50,8 @@ func Setup() *http.Server {
 	// Configure TLS settings
 	log.Info("(3/5) Configuring TLS")
 	cfg := &tls.Config{
-		MinVersion:               tls.VersionTLS12,
-		CurvePreferences:         []tls.CurveID{tls.CurveP521, tls.CurveP384, tls.CurveP256},
-		PreferServerCipherSuites: true,
-		CipherSuites: []uint16{
-			tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
-		},
+		MinVersion:       tls.VersionTLS13,
+		CurvePreferences: []tls.CurveID{tls.CurveP521, tls.CurveP384, tls.CurveP256},
 	}
 
 	// Configure web server