Phil Estes 9b43f5a3a1 Split client and server cipher suite list in TLS defaults ...

Per @ewindisch, removing the CBC ciphers from the client preferred TLS
cipher suites.  This will allow a future version of the server to also
remove the CBC ciphers from the accepted list.

This changes the server default to client + additional CBC cipher list,
and client default to the non-CBC ciphers.

Also, cipher order preference is modified so that best and highest-bit count
ciphers are most preferred.

Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)

2015-06-11 14:00:31 -04:00

..

config.go

Split client and server cipher suite list in TLS defaults

2015-06-11 14:00:31 -04:00