Disable ciphers in tlsv1.3

spectriclabs / elastic_datashader

:earth_americas: Datashader enabled TMS server with ElasticSearch backend

Apache License 2.0

4 stars 1 forks source link

Open desean1625 opened 1 year ago

desean1625 commented 1 year ago

We need to disable chacha20 and aes_128.

I couldn't get the 1.3 ciphers to disable using --ciphers and had to disable all of tlsv1.3. This isn't desirable.

Also In the Dockerfile I pegged

    pip install gunicorn==20.1.0 && \
    pip install uvicorn==0.22.0

because --ssl-version="TLSv1_2" wasn't working in the new versions. These should be fixed

ndmitch311 commented 4 months ago

@desean1625 Is this OBE?

desean1625 commented 4 months ago