Merge pull request #212 from interTwin-eu/190-set-default-good-tls-ci…

…pher-for-oauth2 updated oauth2 proxy startup script inside installer with the correct…
interTwin-eu · Jun 13, 2024 · 2441e2d · 2441e2d
2 parents 820ca4b + 36992c9
commit 2441e2d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cmd/installer/templates/interlink-install.sh b/cmd/installer/templates/interlink-install.sh
@@ -106,6 +106,7 @@ start() {
           --https-address 0.0.0.0:{{.InterLinkPort}} \
           --tls-cert-file ${HOME}/.interlink/config/tls.crt \
           --tls-key-file ${HOME}/.interlink/config/tls.key \
+          --tls-cipher-suite=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384 \
           --skip-jwt-bearer-tokens true > $HOME/.interlink/logs/oauth2-proxy.log 2>&1 &
 
       echo $! > $HOME/.interlink/oauth2-proxy.pid
@@ -127,6 +128,7 @@ start() {
           --https-address 0.0.0.0:{{.InterLinkPort}} \
           --tls-cert-file ${HOME}/.interlink/config/tls.crt \
           --tls-key-file ${HOME}/.interlink/config/tls.key \
+          --tls-cipher-suite=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384 \
           --skip-jwt-bearer-tokens true > $HOME/.interlink/logs/oauth2-proxy.log 2>&1 &
 
       echo $! > $HOME/.interlink/oauth2-proxy.pid