Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 13, 16:45 UTC
caddytls: Remove PreferServerCipherSuites
It has been deprecated by Go
Matthew Holt committed
Jul 28, 2022 at 14:50 UTC
1bdd451913c065ce555d4e2bdb891946b61ffd87
1 file changed
+1
-4
modules/caddytls/connpolicy.go
+1
-4
@@ -172,8 +172,7 @@ func (p *ConnectionPolicy) buildStandardTLSConfig(ctx caddy.Context) error {
172
// so the user-provided config can fill them in; then we will
173
// fill in a default config at the end if they are still unset
174
cfg := &tls.Config{
175
- NextProtos: p.ALPN,
176
- PreferServerCipherSuites: true,
175
+ NextProtos: p.ALPN,
176
GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
177
// TODO: I don't love how this works: we pre-build certmagic configs
178
// so that handshakes are faster. Unfortunately, certmagic configs are
@@ -475,8 +474,6 @@ func setDefaultTLSParams(cfg *tls.Config) {
474
if cfg.MaxVersion == 0 {
475
cfg.MaxVersion = tls.VersionTLS13
476
}
478
-
479
- cfg.PreferServerCipherSuites = true
477
}
478
479
// LeafCertClientAuth verifies the client's leaf certificate.