docker

Phil Estes 9b43f5a3a1 Split client and server cipher suite list in TLS defaults Per @ewindisch, removing the CBC ciphers from the client preferred TLS cipher suites. This will allow a future version of the server to also remove the CBC ciphers from the accepted list. This changes the server default to client + additional CBC cipher list, and client default to the non-CBC ciphers. Also, cipher order preference is modified so that best and highest-bit count ciphers are most preferred. Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)	2015-06-11 14:00:31 -04:00
..
config.go	Split client and server cipher suite list in TLS defaults	2015-06-11 14:00:31 -04:00

Phil Estes 9b43f5a3a1 Split client and server cipher suite list in TLS defaults

Per @ewindisch, removing the CBC ciphers from the client preferred TLS
cipher suites.  This will allow a future version of the server to also
remove the CBC ciphers from the accepted list.

This changes the server default to client + additional CBC cipher list,
and client default to the non-CBC ciphers.

Also, cipher order preference is modified so that best and highest-bit count
ciphers are most preferred.

Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)

2015-06-11 14:00:31 -04:00

config.go

Split client and server cipher suite list in TLS defaults

2015-06-11 14:00:31 -04:00