Golang : Use modern ciphers only in secure connection
Problem:
You want to configure your Golang program to establish secure connection with "modern" type of ciphers and exclude the "obsolete" ciphers such as Triple DES standard - TLS_RSA_WITH_3DES_EDE_CBC_SHA
Solution:
The configuration in crypto/tls
(see https://golang.org/src/crypto/tls/cipher_suites.go) includes Triple DES ciphers and we can override the configuration in our code to only use "modern" type of ciphers and discard "obsolete" ciphers.
For example, from the code fragments taken from https://www.socketloop.com/references/golang-crypto-tls-config-type-example
config := tls.Config{Certificates : []tls.Certificate{certificate}, ClientAuth: tls.RequireAnyClientCert}
config.CipherSuites = []uint16{
tls.TLS_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256}
To list out the type of ciphers in use... use this code fragment:
for s := range config.CipherSuites {
ciphersuit := &config.CipherSuites[s]
fmt.Printf("Config.CipherSuite %d : %s\n", s, ciphersuit)
}
Happy coding!
References:
https://golang.org/pkg/crypto/tls/#pkg-constants
https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4
https://www.socketloop.com/references/golang-crypto-tls-config-type-example
See also : Google Chrome : Your connection to website is encrypted with obsolete cryptography
By Adam Ng
IF you gain some knowledge or the information here solved your programming problem. Please consider donating to the less fortunate or some charities that you like. Apart from donation, planting trees, volunteering or reducing your carbon footprint will be great too.
Advertisement
Tutorials
+10.6k Golang : convert(cast) float to string
+9.1k Golang : Convert file unix timestamp to UTC time example
+23.7k Golang : Convert IP address string to long ( unsigned 32-bit integer )
+9.4k Golang : Get UDP client IP address and differentiate clients by port number
+28.7k Golang : Calculate percentage change of two values
+4.1k Golang : Calculate half life decay example
+11.3k Golang : Exit, terminating or aborting a program
+22.6k Golang : Upload to S3 with official aws-sdk-go package
+28.6k Golang : Remove characters from string example
+16.2k Google Chrome : Your connection to website is encrypted with obsolete cryptography
+8.8k Golang : Simple Jawi(Yawi) to Rumi(Latin/Romanize) converter