1 // Package tlsconfig provides primitives to retrieve secure-enough TLS configurations for both clients and servers. 2 package tlsconfig 3 4 import ( 5 "crypto/tls" 6 ) 7 8 // Client TLS cipher suites (dropping CBC ciphers for client preferred suite set) 9 var clientCipherSuites = []uint16{ 10 tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, 11 tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, 12 tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, 13 tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, 14 } 15