From 24eb3476db53d9f5dc69b927238ee8ac1196e3c3 Mon Sep 17 00:00:00 2001 From: Rahul Somasundaram Date: Tue, 4 Oct 2022 09:51:55 +0530 Subject: [PATCH] added ciphers for h3 --- internal/home/web.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/internal/home/web.go b/internal/home/web.go index d1193885..d10e8dd5 100644 --- a/internal/home/web.go +++ b/internal/home/web.go @@ -318,7 +318,7 @@ func (web *Web) tlsServerLoop() { printHTTPAddresses(aghhttp.SchemeHTTPS) if web.conf.serveHTTP3 { - go web.mustStartHTTP3(addr) + go web.mustStartHTTP3(addr, cipher) } log.Debug("web: starting https server") @@ -330,7 +330,7 @@ func (web *Web) tlsServerLoop() { } } -func (web *Web) mustStartHTTP3(address string) { +func (web *Web) mustStartHTTP3(address string, ciphers []uint16) { defer log.OnPanic("web: http3") web.httpsServer.server3 = &http3.Server{ @@ -340,7 +340,7 @@ func (web *Web) mustStartHTTP3(address string) { TLSConfig: &tls.Config{ Certificates: []tls.Certificate{web.httpsServer.cert}, RootCAs: Context.tlsRoots, - CipherSuites: aghtls.SaferCipherSuites(), + CipherSuites: ciphers, MinVersion: tls.VersionTLS12, }, Handler: withMiddlewares(Context.mux, limitRequestBody),