From f343cf5ba093f3f2f4d883b247e405f9fc29cbe7 Mon Sep 17 00:00:00 2001 From: Kim Alvefur Date: Sun, 26 Dec 2021 00:05:16 +0100 Subject: core.certmanager: Add curveslist to 'old' Mozilla TLS preset Unsure if this was overlooked before or a recent addition. Reproduced the data from JSON file available. Would be nice to have a tool that does that. --- core/certmanager.lua | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'core') diff --git a/core/certmanager.lua b/core/certmanager.lua index 17fadced..efb01d50 100644 --- a/core/certmanager.lua +++ b/core/certmanager.lua @@ -256,7 +256,7 @@ local core_defaults = { local mozilla_ssl_configs = { -- https://wiki.mozilla.org/Security/Server_Side_TLS - -- As of 2021-11-03 + -- Version 5.6 as of 2021-12-26 modern = { protocol = "tlsv1_3"; options = { cipher_server_preference = false }; @@ -313,6 +313,7 @@ local mozilla_ssl_configs = { "AES256-SHA"; "DES-CBC3-SHA"; }; + curveslist = { "X25519"; "prime256v1"; "secp384r1" }; ciphersuites = { "TLS_AES_128_GCM_SHA256"; "TLS_AES_256_GCM_SHA384"; "TLS_CHACHA20_POLY1305_SHA256" }; }; }; -- cgit v1.2.3