[prometheus-users] Re: prometheus 2.48.1 - web-config.yml - cipher_suites "unknown cipher"

2024-01-10 Thread 'Brian Candler' via Prometheus Users
https://pkg.go.dev/crypto/tls#Config // CipherSuites is a list of enabled TLS 1.0–1.2 cipher suites. The order of // the list is ignored. Note that TLS 1.3 ciphersuites are not configurable. // // *If CipherSuites is nil, a safe default list is used.* The default cipher // suites might change

[prometheus-users] Re: prometheus 2.48.1 - web-config.yml - cipher_suites "unknown cipher"

2024-01-09 Thread Alexander Wilke
Hello Brian, thank you for investigation. I tried several ciphers some days ago. Every time I cut more and more ciphers from the cnfiguration but it did not work - probably because it were ciphers which are insecure. However for the first tyr I wanted to allow all and check if all exporters

[prometheus-users] Re: prometheus 2.48.1 - web-config.yml - cipher_suites "unknown cipher"

2024-01-09 Thread 'Brian Candler' via Prometheus Users
Only the first cipher you listed is rejected. The code in exporter_toolkit just iterates over tls.CipherSuites(): https://github.com/prometheus/exporter-toolkit/blob/v0.11.0/web/tls_config.go#L401-L407 which you can replicate like this: https://go.dev/play/p/yFl-V5MrGHh It turns out that