Skip to content
This repository has been archived by the owner on Oct 27, 2020. It is now read-only.

Make TLS Version Configurable #91

Open
frankgreco opened this issue Apr 4, 2018 · 1 comment
Open

Make TLS Version Configurable #91

frankgreco opened this issue Apr 4, 2018 · 1 comment

Comments

@frankgreco
Copy link
Contributor

Currently, there is no minimum TLS version required. Hence, the golang default is used which is 1.0. Due to security requirements, it may be important to set the minimum version. Hence, it would be nice if this setting were configurable in Kanali.

@ghost
Copy link

ghost commented Apr 26, 2018

TLS settings such as version and ciphersuites are a breaking change, so it would be better to opinionate the Kanali API specification and strive for an SSL Labs "A" grade.
As a start, the minimum requirement in Kanali v2 could be based off of Amazon's highest security ELB TLS policy for TLSv1.2 "TLS-1-2-2017-01" as described at https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant