This is an automated email from the ASF dual-hosted git repository. ningjiang pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/servicecomb-pack.git
commit 2554be3da548763dec8d49adaad8e21c170b9574 Author: Lei Zhang <[email protected]> AuthorDate: Fri Nov 15 18:11:17 2019 +0800 SCB-1593 Add notice for Boringssl support ciphers --- alpha/alpha-server/src/main/resources/ssl.properties | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/alpha/alpha-server/src/main/resources/ssl.properties b/alpha/alpha-server/src/main/resources/ssl.properties index ff3c214..608247c 100644 --- a/alpha/alpha-server/src/main/resources/ssl.properties +++ b/alpha/alpha-server/src/main/resources/ssl.properties @@ -13,5 +13,11 @@ # See the License for the specific language governing permissions and # limitations under the License. +# Netty support ssl with boringssl https://github.com/google/boringssl +# Boringssl support ciphers https://github.com/google/boringssl/blob/master/ssl/ssl_cipher.cc +# +# Notice: +# Boringssl remove legacy SHA-2 CBC ciphers. https://github.com/google/boringssl/commit/6e678eeb6e76171712ae00d467321b6fe196152d + ciphers = ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES256-GCM-SHA384 protocols = TLSv1.2
