Skip to content

TLS and SSH Cipher #54929

Discussion options

You must be logged in to vote

The default ciphers used by Teleport are listed here:

teleport/lib/utils/tls.go

Lines 170 to 190 in 520cfe9

// DefaultCipherSuites returns the default list of cipher suites that
// Teleport supports. By default Teleport only support modern ciphers
// (Chacha20 and AES GCM) and key exchanges which support perfect forward
// secrecy (ECDHE).
//
// Note that TLS_RSA_WITH_AES_128_GCM_SHA{256,384} have been dropped due to
// being banned by HTTP2 which breaks gRPC clients. For more information see:
// https://tools.ietf.org/html/rfc7540#appendix-A. These two can still be
// manually added if needed.
func DefaultCipherSuites() []uint16 {

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by webvictim
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants