open-vault/scripts
Jeff Mitchell 4e1470f483
Handpick cluster cipher suites when they're not user-set (#7487)
* Handpick cluster cipher suites when they're not user-set

There is an undocumented way for users to choose cluster cipher suites
but for the most part this is to paper over the fact that there are
undesirable suites in TLS 1.2.

If not explicitly set, have the set of cipher suites for the cluster
port come from a hand-picked list; either the allowed TLS 1.3 set (for
forwards compatibility) or the three identical ones for TLS 1.2.

The 1.2 suites have been supported in Go until at least as far back as
Go 1.9 from two years ago. As a result in cases where no specific suites
have been chosen this _ought_ to have no compatibility issues.

Also includes a useful test script.
2019-10-28 12:51:45 -04:00
..
cross embed yarn (#7740) 2019-10-25 16:00:45 -05:00
windows Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
assetcheck.sh Add UI asset file checks to Makefile (#6428) 2019-03-25 12:07:14 -05:00
build.sh Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
coverage.sh Migrate to built-in Go vendoring. 2016-02-18 15:06:02 -05:00
dist.sh Revert "Migrate build to use go modules" 2019-07-09 04:15:03 -04:00
gen_openapi.sh Add engines to OpenAPI (#7098) 2019-07-24 17:03:03 -07:00
gofmtcheck.sh add gofmt checks to Vault and format existing code (#2745) 2017-05-19 08:34:17 -04:00
goversioncheck.sh Allow devel in go version check and bump to 1.11 2019-01-29 11:27:04 -05:00
testciphers.sh Handpick cluster cipher suites when they're not user-set (#7487) 2019-10-28 12:51:45 -04:00
update_deps.sh Update dep script 2019-03-25 20:38:08 -04:00
update_plugin_modules.sh Use separate env var for Vault commit in plugin update script 2019-08-14 17:02:28 -04:00