Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add --agent-cipher-suites to sensu-backend #2954

Open
echlebek opened this issue May 14, 2019 · 0 comments
Open

Add --agent-cipher-suites to sensu-backend #2954

echlebek opened this issue May 14, 2019 · 0 comments
Labels
component:backend Sensu Backend improvements security

Comments

@echlebek
Copy link
Contributor

Spec

Add configuration to sensu-backend that allows users to specify a comma-separate list of cipher suites for backend <-> agent communication.

If the option is not specified, the server should use the default ciphers that are configured in https://github.com/sensu/sensu-go/blob/master/api/core/v2/tls.go.

Testing

Test the service with https://github.com/drwetter/testssl.sh with a known-good and a known-bad set of ciphers to ensure that the feature is working as expected.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
component:backend Sensu Backend improvements security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@calebhailey @echlebek