elixir-mint / mint

Functional HTTP client for Elixir with support for HTTP/1 and HTTP/2 🌱
Apache License 2.0
1.36k stars 106 forks source link

Set default ciphers for all specified TLS versions #316

Closed lukebakken closed 3 years ago

lukebakken commented 3 years ago

See #313, #310 and this discussion.

The following code retrieves all TLS v1.3 cipher suites then filters based on what the local crypto lib supports:

ciphers = :ssl.filter_cipher_suites(:ssl.cipher_suites(:all, :"tlsv1.3"), [])

This is pretty much what users always want by default so mint should do that. Don't ask me why this isn't the default OTP behavior 🤷‍♂️