Skip to content

Commit fe308fa

Browse files
richardsonnickrichardsonnick
authored andcommitted
Add: Support for specifying elliptic curves in TLS handshake
1 parent 1517fca commit fe308fa

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

config/v1/types_tlssecurityprofile.go

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -213,6 +213,14 @@ type TLSProfileSpec struct {
213213
//
214214
// +listType=atomic
215215
Ciphers []string `json:"ciphers"`
216+
// curves is used to specify the elliptic curves that are used during
217+
// the TLS handshake. Operators may remove entries their operands do
218+
// not support. For example, to use X25519 and P-256 (yaml):
219+
//
220+
// curves:
221+
// - X25519
222+
// - P-256
223+
Curves []string `json:"curves.omitempty"`
216224
// minTLSVersion is used to specify the minimal version of the TLS protocol
217225
// that is negotiated during the TLS handshake. For example, to use TLS
218226
// versions 1.1, 1.2 and 1.3 (yaml):

0 commit comments

Comments
 (0)