Skip to content

Commit

Permalink
Add ciphers for latest tls (#49)
Browse files Browse the repository at this point in the history
* Add ciphers for latest tls

This is related to:
ministryofjustice/cloud-platform#4159

* Updated ciphers to OpenSSL name

* Added additional sll-ciphers

This is taken from:
https://ssl-config.mozilla.org/
  • Loading branch information
vijay-veeranki committed Oct 21, 2022
1 parent b6fd364 commit 1d37c11
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions templates/values.yaml.tpl
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,7 @@ controller:

%{ if enable_latest_tls }
ssl-protocols: "TLSv1.2 TLSv1.3"
ssl-ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA"
%{ else ~}
# Config below is for old TLS versions. Specifically an incident with IE11 on
# bank-admin.prisoner-money.service.justice.gov.uk. More info CP Incidents page.
Expand Down

0 comments on commit 1d37c11

Please sign in to comment.