tyler
/
proxmox-backup
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

proxy: use ciphers from config if set 

Signed-off-by: Hannes Laimer <h.laimer@proxmox.com>
This commit is contained in:
Hannes Laimer 2022-01-11 12:39:36 +01:00 committed by Fabian Grünbichler
parent 1d552d2dd5
commit 2eba3967b2
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/bin/proxmox-backup-proxy.rs
View File

@ -342,7 +342,17 @@ fn make_tls_acceptor() -> Result<SslAcceptor, Error> {
let key_path = configdir!("/proxy.key");
let cert_path = configdir!("/proxy.pem");
let (config, _) = proxmox_backup::config::node::config()?;
let ciphers_tls13 = config.ciphers_tls13;
let ciphers_tls12 = config.ciphers_tls12;
let mut acceptor = SslAcceptor::mozilla_intermediate_v5(SslMethod::tls()).unwrap();
if let Some(ciphers) = ciphers_tls13.as_deref() {
acceptor.set_ciphersuites(ciphers)?;
}
if let Some(ciphers) = ciphers_tls12.as_deref() {
acceptor.set_cipher_list(ciphers)?;
}
acceptor.set_private_key_file(key_path, SslFiletype::PEM)
.map_err(|err| format_err!("unable to read proxy key {} - {}", key_path, err))?;
acceptor.set_certificate_chain_file(cert_path)