search

gregtwallace / certwarden

Cert Warden is a centralized ACME Client. It provides an API for certificate consumers to fetch their individual keys and certs with API keys.
https://www.certwarden.com/
Other
233 stars 7 forks source link

Cipher types #60

Closed clas0415 closed 2 months ago

clas0415 commented 2 months ago

Is there a why to restrict the types of cipher that certwarden will respond to? At the moment it responds to 3DES-CBC, which I'd like to disable. Could this become an settings option or preference file? [I may have missed something obvious, my apologies if I have!]

Many thanks!

gregtwallace commented 2 months ago

Golang defaults are in place for this type of control. The language deprecates and removes broken ciphers over time. If you want more grandular control than this, I'd recommend sticking Cert Warden behind your proxy of choice and making these tweaks in the proxy settings.