Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to configure TLS versions and ciphers #2956

Closed
wants to merge 2 commits into from

Conversation

manuelluis
Copy link

This patch uses 4 new envs:

  • DRONE_TLS_MIN_VERSION minimum TLS version that is acceptable
  • DRONE_TLS_MAX_VERSION the maximum TLS version that is acceptable
  • DRONE_TLS_CURVES list of elliptic curves that will be used in an ECDHE handshake
  • DRONE_TLS_CIPHER_SUITES list of supported cipher suites

For example:

DRONE_TLS_MIN_VERSION="TLS12"
DRONE_TLS_CURVES="CurveP256,X25519"
DRONE_TLS_CIPHER_SUITES="ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,ECDHE_RSA_WITH_AES_256_GCM_SHA384,ECDHE_ECDSA_WITH_CHACHA20_POLY1305,ECDHE_RSA_WITH_CHACHA20_POLY1305,ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,ECDHE_RSA_WITH_AES_128_GCM_SHA256"

@CLAassistant
Copy link

CLAassistant commented Jan 19, 2022

CLA assistant check
All committers have signed the CLA.

@hitesharinga hitesharinga changed the base branch from master to drone October 4, 2023 02:43
@bot2-harness
Copy link
Collaborator

This PR has been automatically closed due to inactivity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants