Stowage/rest-server
2
0
Fork 0
mirror of https://github.com/restic/rest-server.git synced 2025-10-19 07:33:21 +00:00
Code Issues Projects Releases Packages Wiki Activity

README.md: Fixed typo

Browse source 
main.go: Added error for unknown TLS min versions

main.go: Changed CurvePreferences in TLS config to Go default

main.go: Removed handling for TLS min versions 1.0 and 1.1

Signed-off-by: darkspir <forgejo.darkspir@teemitmil.ch>
This commit is contained in:
darkspir 2025-02-08 12:18:16 +01:00 • committed by Michael Eischer
parent 0679d0a9c0
commit 9b91cd9279
2 changed files with 2 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -49,7 +49,7 @@ Flags:
--tls turn on TLS support --tls turn on TLS support
--tls-cert string TLS certificate path --tls-cert string TLS certificate path
--tls-key string TLS key path --tls-key string TLS key path
--tls-min-ver string TLS min version (default: 1.2) (default "1.2") --tls-min-ver string TLS min version (default: 1.2)
-v, --version version for rest-server -v, --version version for rest-server
``` ```

9
cmd/rest-server/main.go
View file

@ -181,7 +181,6 @@ func (app *restServerApp) runRoot(_ *cobra.Command, _ []string) error {
tlscfg := &tls.Config{ tlscfg := &tls.Config{
MinVersion: tls.VersionTLS12, MinVersion: tls.VersionTLS12,
CurvePreferences: []tls.CurveID{tls.CurveP521, tls.CurveP384, tls.CurveP256},
CipherSuites: []uint16{ CipherSuites: []uint16{
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
@ -192,18 +191,12 @@ func (app *restServerApp) runRoot(_ *cobra.Command, _ []string) error {
}, },
} }
switch app.Server.TLSMinVer { switch app.Server.TLSMinVer {
case "1.0":
// Only available with GODEBUG="tls10server=1"
tlscfg.MinVersion = tls.VersionTLS10
case "1.1":
// Only available with GODEBUG="tls10server=1"
tlscfg.MinVersion = tls.VersionTLS11
case "1.2": case "1.2":
tlscfg.MinVersion = tls.VersionTLS12 tlscfg.MinVersion = tls.VersionTLS12
case "1.3": case "1.3":
tlscfg.MinVersion = tls.VersionTLS13 tlscfg.MinVersion = tls.VersionTLS13
default: default:
tlscfg.MinVersion = tls.VersionTLS12 return fmt.Errorf("Unsupported TLS min version: %s", app.Server.TLSMinVer)
} }
srv := &http.Server{ srv := &http.Server{