]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: allow the server to enforce its ciphersuite preferences.
authorAdam Langley <agl@golang.org>
Tue, 22 Jan 2013 15:10:38 +0000 (10:10 -0500)
committerAdam Langley <agl@golang.org>
Tue, 22 Jan 2013 15:10:38 +0000 (10:10 -0500)
commit793cbd5b81619e19eaae289ec8071e2016f85db9
tree2865d12e8e71e018651d4338d4a20b3326ef0596
parentfd32ac4bae462672b8b6b3737111f3c213f7230a
crypto/tls: allow the server to enforce its ciphersuite preferences.

Previously, Go TLS servers always took the client's preferences into
account when selecting a ciphersuite. This change adds the option of
using the server's preferences, which can be expressed by setting
tls.Config.CipherSuites.

This mirrors Apache's SSLHonorCipherOrder directive.

R=golang-dev, nightlyone, bradfitz, ality
CC=golang-dev
https://golang.org/cl/7163043
src/pkg/crypto/tls/common.go
src/pkg/crypto/tls/handshake_server.go
src/pkg/crypto/tls/handshake_server_test.go