added ciphers for h3
This commit is contained in:
@@ -318,7 +318,7 @@ func (web *Web) tlsServerLoop() {
|
|||||||
printHTTPAddresses(aghhttp.SchemeHTTPS)
|
printHTTPAddresses(aghhttp.SchemeHTTPS)
|
||||||
|
|
||||||
if web.conf.serveHTTP3 {
|
if web.conf.serveHTTP3 {
|
||||||
go web.mustStartHTTP3(addr)
|
go web.mustStartHTTP3(addr, cipher)
|
||||||
}
|
}
|
||||||
|
|
||||||
log.Debug("web: starting https server")
|
log.Debug("web: starting https server")
|
||||||
@@ -330,7 +330,7 @@ func (web *Web) tlsServerLoop() {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
func (web *Web) mustStartHTTP3(address string) {
|
func (web *Web) mustStartHTTP3(address string, ciphers []uint16) {
|
||||||
defer log.OnPanic("web: http3")
|
defer log.OnPanic("web: http3")
|
||||||
|
|
||||||
web.httpsServer.server3 = &http3.Server{
|
web.httpsServer.server3 = &http3.Server{
|
||||||
@@ -340,7 +340,7 @@ func (web *Web) mustStartHTTP3(address string) {
|
|||||||
TLSConfig: &tls.Config{
|
TLSConfig: &tls.Config{
|
||||||
Certificates: []tls.Certificate{web.httpsServer.cert},
|
Certificates: []tls.Certificate{web.httpsServer.cert},
|
||||||
RootCAs: Context.tlsRoots,
|
RootCAs: Context.tlsRoots,
|
||||||
CipherSuites: aghtls.SaferCipherSuites(),
|
CipherSuites: ciphers,
|
||||||
MinVersion: tls.VersionTLS12,
|
MinVersion: tls.VersionTLS12,
|
||||||
},
|
},
|
||||||
Handler: withMiddlewares(Context.mux, limitRequestBody),
|
Handler: withMiddlewares(Context.mux, limitRequestBody),
|
||||||
|
|||||||
Reference in New Issue
Block a user