prefer server cipher suites (#29379)

G402 (CWE-295): TLS PreferServerCipherSuites set false. Signed-off-by: bergquist <carl.bergquist@gmail.com>
5 years ago · aebe8985c5
parent 2af4deedd2
commit aebe8985c5
1 changed files with 1 additions and 1 deletions
--- a/pkg/api/http_server.go
+++ b/pkg/api/http_server.go
@ -249,7 +249,7 @@ func (hs *HTTPServer) configureHttp2() error {

 	tlsCfg := &tls.Config{
 		MinVersion:               tls.VersionTLS12,
-		PreferServerCipherSuites: false,
+		PreferServerCipherSuites: true,
 		CipherSuites: []uint16{
 			tls.TLS_CHACHA20_POLY1305_SHA256,
 			tls.TLS_AES_128_GCM_SHA256,