Andreas/gotty
1
0
Fork 0
mirror of https://github.com/yudai/gotty.git synced 2026-01-20 16:26:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

refactor: add tls cipher whitelist for https and wss

Browse source
This commit is contained in:
bjergsen zhu 2024-06-13 18:58:07 +08:00 • committed by root
parent a080c85cbc
commit ae2a73dd1b
76 changed files with 12350 additions and 4218 deletions
Download patch file Download diff file Expand all files Collapse all files

13
vendor/github.com/gorilla/websocket/client.go generated vendored
View file

@ -206,7 +206,18 @@ func (d *Dialer) Dial(urlStr string, requestHeader http.Header) (*Conn, *http.Re
if u.Scheme == "wss" {
cfg := d.TLSClientConfig
if cfg == nil {
cfg = &tls.Config{ServerName: hostNoPort}
cfg = &tls.Config{
ServerName: hostNoPort,
MinVersion: tls.VersionTLS12,
CipherSuites: []uint16{
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
tls.TLS_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_RSA_WITH_AES_256_GCM_SHA384,
},
}
} else if cfg.ServerName == "" {
shallowCopy := *cfg
cfg = &shallowCopy