jyapayne/Nim
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

net: use a secure cipher list by default

Browse source 
Previously, the `net` module use the blanket "ALL" as the default cipher
list. This list may contain security ciphers that are weak and/or outdated
according to the current standard.

This commit introduces a new module `ssl_config` that contains the
latest OpenSSL configurations as recommended by Mozilla OpSec, and
make the `net` module use the cipher list targeting `intermediate`
compatibility level as the default.
This commit is contained in:
Leorize 2020-06-03 17:02:18 -05:00 • committed by Andreas Rumpf
commit 1fb2a58674
5 changed files with 125 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tools/ssl_config_parser.nims Normal file
View file

@ -0,0 +1 @@
--d:ssl