Golang : Use TLS version 1.2 and enforce server security configuration over client
Problem:
You want to force your Golang program to use TLS(Transport Layer Security) protocol version 1.2 only and use server TLS configuration instead of client. How to do that?
Solution:
Set the MinVersion, MaxVersion parameters to tls.VersionTLS12
and PreferServerCipherSuites to true
. Setting PreferServerCipherSuites will force client to use server TLS configuration.
config.MinVersion = tls.VersionTLS12
config.MaxVersion = tls.VersionTLS12
config.PreferServerCipherSuites = true
For example:
config := tls.Config{Certificates : []tls.Certificate{certificate}, ClientAuth: tls.RequireAnyClientCert}
config.CipherSuites = []uint16{
tls.TLS_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256}
config.MinVersion = tls.VersionTLS12
config.MaxVersion = tls.VersionTLS12
config.PreferServerCipherSuites = true
References:
See also : Golang : Use modern ciphers only in secure connection
By Adam Ng
IF you gain some knowledge or the information here solved your programming problem. Please consider donating to the less fortunate or some charities that you like. Apart from donation, planting trees, volunteering or reducing your carbon footprint will be great too.
Advertisement
Tutorials
+7.7k Golang : Trim everything onward after a word
+9.2k Golang : How to get ECDSA curve and parameters data?
+9.6k Golang : Find correlation coefficient example
+23.2k Golang : Get ASCII code from a key press(cross-platform) example
+20.1k Golang : Check if os.Stdin input data is piped or from terminal
+25.9k Mac/Linux and Golang : Fix bind: address already in use error
+9.8k Golang : Check if user agent is a robot or crawler example
+7.7k Golang : Ways to recover memory during run time.
+21.1k Golang : How to get time zone and load different time zone?
+10.4k RPM : error: db3 error(-30974) from dbenv->failchk: DB_RUNRECOVERY: Fatal error, run database recovery