How to overwrite TLS cipher suites during runtime?

[Sidhartha-Biswal]

The TLS cipher suites for collector http interface can be configured with the --collector.http.tls.cipher-suites CLI flag.
Comma-separated list of cipher suites for the server, values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).

Hi @yurishkuro,

Can the TLS cipher suites be overwritten in the Jaeger code during runtime?

[Sidhartha-Biswal]

Hi @yurishkuro,

Does Jaeger support overwriting of cipher suites during runtime?

[yurishkuro]

no

[Sidhartha-Biswal]

Hi @yurishkuro,

Thanks for the confirmation.

[Sidhartha-Biswal]

Hi @yurishkuro,

May I know your view on the runtime overwriting of the cipher suites? Is it a valid use case?

If yes, do you have any plan to implement this in the future?

Thanks

[yurishkuro]

You can restart the server to pick up new settings. Go TLS does not support swapping cipher suites.

[Sidhartha-Biswal]

thanks @yurishkuro