diff options
| author | Roland Shoemaker <roland@golang.org> | 2023-11-10 10:42:42 -0800 |
|---|---|---|
| committer | Roland Shoemaker <roland@golang.org> | 2023-11-14 18:03:29 +0000 |
| commit | 67d555e089180aaa39993729b7f9693ea12d6ea6 (patch) | |
| tree | 8d50ce1a1fdad4e4acc782043082c14d96f01c94 /src/net/http | |
| parent | 362bf4fc6d3b456429e998582b15a2765e640741 (diff) | |
| download | go-67d555e089180aaa39993729b7f9693ea12d6ea6.tar.xz | |
crypto/tls: remove RSA KEX ciphers from the default list
Removes the RSA KEX based ciphers from the default list. This can be
reverted using the tlsrsakex GODEBUG.
Fixes #63413
Change-Id: Id221be3eb2f6c24b91039d380313f0c87d339f98
Reviewed-on: https://go-review.googlesource.com/c/go/+/541517
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
Diffstat (limited to 'src/net/http')
| -rw-r--r-- | src/net/http/client_test.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/net/http/client_test.go b/src/net/http/client_test.go index df2a670aee..7459b9cb6e 100644 --- a/src/net/http/client_test.go +++ b/src/net/http/client_test.go @@ -946,7 +946,7 @@ func testResponseSetsTLSConnectionState(t *testing.T, mode testMode) { c := ts.Client() tr := c.Transport.(*Transport) - tr.TLSClientConfig.CipherSuites = []uint16{tls.TLS_RSA_WITH_3DES_EDE_CBC_SHA} + tr.TLSClientConfig.CipherSuites = []uint16{tls.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA} tr.TLSClientConfig.MaxVersion = tls.VersionTLS12 // to get to pick the cipher suite tr.Dial = func(netw, addr string) (net.Conn, error) { return net.Dial(netw, ts.Listener.Addr().String()) @@ -959,7 +959,7 @@ func testResponseSetsTLSConnectionState(t *testing.T, mode testMode) { if res.TLS == nil { t.Fatal("Response didn't set TLS Connection State.") } - if got, want := res.TLS.CipherSuite, tls.TLS_RSA_WITH_3DES_EDE_CBC_SHA; got != want { + if got, want := res.TLS.CipherSuite, tls.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA; got != want { t.Errorf("TLS Cipher Suite = %d; want %d", got, want) } } |