cloudfoundry / gorouter

CF Router
Apache License 2.0
441 stars 226 forks source link

Convert our processCipherSuites functionality to autogenerate #391

Closed geofffranks closed 9 months ago

geofffranks commented 9 months ago

Use golang's supported CipherSuites() and InsecureCipherSuites() to populate our mapping of cipher suite names to ID. However we have supported legacy cipher suite names, as well as openssl cipher suite names in the past, so those remain explicitly added.

Newer (TLS 1.3) cipher suites in openssl seem to use the same suite names as RFC format, so maybe we don't need to worry about future translations between OpenSSL + RFC naming formats. If that changes, we're no worse off than we are now, needing to manually add the cipher suites.