This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Update Synapse's ciphers & restrict serving to TLS1.2+ #5529

Closed

hawkowl opened this issue Jun 23, 2019 · 1 comment

Assignees

Labels

z-p2

Contributor

hawkowl commented Jun 23, 2019

We currently allow AES128-CCM, which isn't a great cipher and isn't in Mozilla's modern suite.

We should also get rid of TLS 1.0 and 1.1, since we require ciphers that basically require a TLS 1.2 compatible TLS stack to talk to.

hawkowl self-assigned this

hawkowl mentioned this issue

Update the TLS cipher string and provide configurability for TLS on outgoing federation #5550

Merged

neilisfragile added maintenance z-p2 labels

Member

richvdh commented Jul 4, 2019

fixed by 5550

richvdh closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.