actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-12-25 12:05:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update to config struct to unmarshal the mozilla server-side TLS conf version 5

Browse source 
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
This commit is contained in:
Cosmin Cojocar 2019-09-09 15:04:54 +02:00 committed by Grant Murphy
parent e050355b4b
commit 76ce9f0147
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
cmd/tlsconfig/tlsconfig.go
View file

@ -36,7 +36,7 @@ type ServerSideTLSJson struct {
// see https://wiki.mozilla.org/Security/Server_Side_TLS // see https://wiki.mozilla.org/Security/Server_Side_TLS
type Configuration struct { type Configuration struct {
OpenSSLCiphersuites []string `json:"openssl_ciphersuites"` OpenSSLCiphersuites []string `json:"openssl_ciphersuites"`
Ciphersuites []string `json:"ciphersuites"` OpenSSLCiphers []string `json:"openssl_ciphers"`
TLSVersions []string `json:"tls_versions"` TLSVersions []string `json:"tls_versions"`
TLSCurves []string `json:"tls_curves"` TLSCurves []string `json:"tls_curves"`
CertificateTypes []string `json:"certificate_types"` CertificateTypes []string `json:"certificate_types"`
@ -87,7 +87,10 @@ func getGoCipherConfig(name string, sstls ServerSideTLSJson) (goCipherConfigurat
return cipherConf, fmt.Errorf("TLS configuration '%s' not found", name) return cipherConf, fmt.Errorf("TLS configuration '%s' not found", name)
} }
for _, cipherName := range conf.Ciphersuites { // These ciphers are already defined in IANA format
cipherConf.Ciphers = append(cipherConf.Ciphers, conf.OpenSSLCiphersuites...)
for _, cipherName := range conf.OpenSSLCiphers {
cipherSuite, ok := constants.CipherSuites[cipherName] cipherSuite, ok := constants.CipherSuites[cipherName]
if !ok { if !ok {
log.Printf("'%s' cipher is not available in crypto/tls package\n", cipherName) log.Printf("'%s' cipher is not available in crypto/tls package\n", cipherName)