mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 05:37:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

core.certmanager: Add curveslist to 'old' Mozilla TLS preset

Browse source 
Unsure if this was overlooked before or a recent addition.

Reproduced the data from JSON file available. Would be nice to have a
tool that does that.
This commit is contained in:
Kim Alvefur 2021-12-26 00:05:16 +01:00
parent 5e4844806a
commit f343cf5ba0
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
core/certmanager.lua
View file

@ -256,7 +256,7 @@ local core_defaults = {
local mozilla_ssl_configs = {
-- https://wiki.mozilla.org/Security/Server_Side_TLS
-- As of 2021-11-03
-- Version 5.6 as of 2021-12-26
modern = {
protocol = "tlsv1_3";
options = { cipher_server_preference = false };
@ -313,6 +313,7 @@ local mozilla_ssl_configs = {
"AES256-SHA";
"DES-CBC3-SHA";
};
curveslist = { "X25519"; "prime256v1"; "secp384r1" };
ciphersuites = { "TLS_AES_128_GCM_SHA256"; "TLS_AES_256_GCM_SHA384"; "TLS_CHACHA20_POLY1305_SHA256" };
};
};