diff --git a/api/crypto/tls.go b/api/crypto/tls.go index 2cb216593..e46998898 100644 --- a/api/crypto/tls.go +++ b/api/crypto/tls.go @@ -9,7 +9,18 @@ import ( // CreateServerTLSConfiguration creates a basic tls.Config to be used by servers with recommended TLS settings func CreateServerTLSConfiguration() *tls.Config { return &tls.Config{ - MinVersion: tls.VersionTLS13, + MinVersion: tls.VersionTLS12, + CipherSuites: []uint16{ + tls.TLS_AES_128_GCM_SHA256, + tls.TLS_AES_256_GCM_SHA384, + tls.TLS_CHACHA20_POLY1305_SHA256, + tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, + tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, + tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, + tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, + tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, + tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, + }, } }