@marcel91200 / caddy Mirror · read-only / commits / 1bdd4519
Fork 0

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Mirrored from https://github.com/Slazee/caddy.git

Synced Nov 13, 16:45 UTC

caddytls: Remove PreferServerCipherSuites

It has been deprecated by Go

Matthew Holt committed Jul 28, 2022 at 14:50 UTC 1bdd451913c065ce555d4e2bdb891946b61ffd87
1 file changed +1 -4
modules/caddytls/connpolicy.go
+1 -4
@@ -172,8 +172,7 @@ func (p *ConnectionPolicy) buildStandardTLSConfig(ctx caddy.Context) error {
172 // so the user-provided config can fill them in; then we will
173 // fill in a default config at the end if they are still unset
174 cfg := &tls.Config{
175 - NextProtos: p.ALPN,
176 - PreferServerCipherSuites: true,
175 + NextProtos: p.ALPN,
176 GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
177 // TODO: I don't love how this works: we pre-build certmagic configs
178 // so that handshakes are faster. Unfortunately, certmagic configs are
@@ -475,8 +474,6 @@ func setDefaultTLSParams(cfg *tls.Config) {
474 if cfg.MaxVersion == 0 {
475 cfg.MaxVersion = tls.VersionTLS13
476 }
478 -
479 - cfg.PreferServerCipherSuites = true
477 }
478
479 // LeafCertClientAuth verifies the client's leaf certificate.