config_client_ciphers.go 480 B

123456789101112131415161718
  1. // +build go1.5
  2. // Package tlsconfig provides primitives to retrieve secure-enough TLS configurations for both clients and servers.
  3. //
  4. package tlsconfig
  5. import (
  6. "crypto/tls"
  7. )
  8. // Client TLS cipher suites (dropping CBC ciphers for client preferred suite set)
  9. var clientCipherSuites = []uint16{
  10. tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
  11. tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
  12. tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
  13. tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
  14. }