Phil Estes 542650e582 Split client and server cipher suite list in TLS defaults ...

Per @ewindisch, removing the CBC ciphers from the client preferred TLS
cipher suites.  This will allow a future version of the server to also
remove the CBC ciphers from the accepted list.

This changes the server default to client + additional CBC cipher list,
and client default to the non-CBC ciphers.

Also, cipher order preference is modified so that best and highest-bit count
ciphers are most preferred.

Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)
Upstream-commit: 9b43f5a3a1c12722a7f7b5ea60c28d02bac60d1c
Component: engine

2015-06-11 14:00:31 -04:00

components/engine

Split client and server cipher suite list in TLS defaults

2015-06-11 14:00:31 -04:00

S

Description

The Docker CLI

clidocker

361 MiB

Languages

Go 92.3%

Shell 5.4%

Dockerfile 1.1%

Go-Checksums 0.7%

Makefile 0.3%

Other 0.2%