Merge pull request #2512 from vcptr/nilciphers

let crypto/tls choose the proper ciphers
v2ray · May 31, 2020 · 3cf16bf · 3cf16bf
2 parents 3dfee90 + bcfd778
commit 3cf16bf
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/transport/internet/tls/config.go b/transport/internet/tls/config.go
@@ -187,11 +187,8 @@ func (c *Config) GetTLSConfig(opts ...Option) *tls.Config {
 	}
 
 	if !c.AllowInsecureCiphers && len(config.CipherSuites) == 0 {
-		// use tls cipher suites from cryto/tls
-		config.CipherSuites = []uint16{}
-		for _, s := range tls.CipherSuites() {
-			config.CipherSuites = append(config.CipherSuites, s.ID)
-		}
+		// crypto/tls will use the proper ciphers
+		config.CipherSuites = nil
 	}
 
 	config.InsecureSkipVerify = c.AllowInsecure