grpc: Simplify server TLS config #2755
Assignees
Labels
I3
Minimal impact
neofs-storage
Storage node application issues
S3
Minimally significant
U4
Nothing urgent
Milestone
Comments
cthulhu-rider
added
neofs-storage
|
What? We're maintaining a list of cipher suites internally? I want to kill it ASAP. |
cthulhu-rider
added a commit
that referenced
this issue
Mar 5, 2024
The gRPC lib defaults min accepted TLS version to 1.2 since release v1.60.0 (grpc/grpc-go#6758). Refs #2755. Signed-off-by: Leonard Lyubich <[email protected]>
cthulhu-rider
added a commit
that referenced
this issue
Mar 5, 2024
Insecure cipher suites must never be allowed. Refs #2755. Signed-off-by: Leonard Lyubich <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1.20#2754gRPC release v1.60.0 contains server-side TLS fix
storage node's code touches this API. At a glance it is very similar, but the list of cipher suites is not completely equivalent
need to revise and try to rely on gRPC defaults which follow RFC 7540 since then
The text was updated successfully, but these errors were encountered: