Revert 5d4c387 due to issue #70 on GitHub. Lock the min TLS version t…

…o 1.2 instead
nirui · Dec 23, 2021 · 366be28 · 366be28
1 parent c16f1f9
commit 366be28
Showing 1 changed file with 1 addition and 6 deletions.
diff --git a/application/server/server.go b/application/server/server.go
@@ -88,15 +88,10 @@ func (s Server) Serve(
 	ssCfg := serverCfg.WithDefault()
 	l := s.logger.Context(
 		"Server (%s:%d)", ssCfg.ListenInterface, ssCfg.ListenPort)
-	cipherSuites := tls.CipherSuites() // only return secure ciphers
-	selectedCipherSuites := make([]uint16, 0, len(cipherSuites))
-	for _, s := range cipherSuites {
-		selectedCipherSuites = append(selectedCipherSuites, s.ID)
-	}
 	ss := &Serving{
 		server: http.Server{
 			Handler:           handlerBuilder(commonCfg, ssCfg, l),
-			TLSConfig:         &tls.Config{CipherSuites: selectedCipherSuites},
+			TLSConfig:         &tls.Config{MinVersion: tls.VersionTLS12},
 			ReadTimeout:       ssCfg.ReadTimeout,
 			ReadHeaderTimeout: ssCfg.InitialTimeout,
 			WriteTimeout:      ssCfg.WriteTimeout,