From bec3fbea477b5f791f2de8adebd774cd92859a82 Mon Sep 17 00:00:00 2001 From: Carl Bergquist Date: Thu, 26 Nov 2020 12:22:50 +0100 Subject: [PATCH] remove insecure cipher suit as default option (#29378) G402 (CWE-295): TLS Bad Cipher Suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA Signed-off-by: bergquist --- pkg/api/http_server.go | 1 - 1 file changed, 1 deletion(-) diff --git a/pkg/api/http_server.go b/pkg/api/http_server.go index 42c80d94a70..8ca5ce36e88 100644 --- a/pkg/api/http_server.go +++ b/pkg/api/http_server.go @@ -213,7 +213,6 @@ func (hs *HTTPServer) configureHttps() error { tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, - tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,