diff options
Diffstat (limited to 'plugin/tls/tls.go')
| -rw-r--r-- | plugin/tls/tls.go | 18 |
1 files changed, 0 insertions, 18 deletions
diff --git a/plugin/tls/tls.go b/plugin/tls/tls.go index 930c5e702..2658159a9 100644 --- a/plugin/tls/tls.go +++ b/plugin/tls/tls.go @@ -19,22 +19,6 @@ func setup(c *caddy.Controller) error { return nil } -func setTLSDefaults(tls *ctls.Config) { - tls.MinVersion = ctls.VersionTLS12 - tls.MaxVersion = ctls.VersionTLS13 - tls.CipherSuites = []uint16{ - ctls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, - ctls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, - ctls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, - ctls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, - ctls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, - ctls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, - ctls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, - ctls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, - ctls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, - } -} - func parseTLS(c *caddy.Controller) error { config := dnsserver.GetConfig(c) @@ -81,8 +65,6 @@ func parseTLS(c *caddy.Controller) error { // NewTLSConfigFromArgs only sets RootCAs, so we need to let ClientCAs refer to it. tls.ClientCAs = tls.RootCAs - setTLSDefaults(tls) - config.TLSConfig = tls } return nil |