Golang : Use TLS version 1.2 and enforce server security configuration over client
Problem:
You want to force your Golang program to use TLS(Transport Layer Security) protocol version 1.2 only and use server TLS configuration instead of client. How to do that?
Solution:
Set the MinVersion, MaxVersion parameters to tls.VersionTLS12
and PreferServerCipherSuites to true
. Setting PreferServerCipherSuites will force client to use server TLS configuration.
config.MinVersion = tls.VersionTLS12
config.MaxVersion = tls.VersionTLS12
config.PreferServerCipherSuites = true
For example:
config := tls.Config{Certificates : []tls.Certificate{certificate}, ClientAuth: tls.RequireAnyClientCert}
config.CipherSuites = []uint16{
tls.TLS_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256}
config.MinVersion = tls.VersionTLS12
config.MaxVersion = tls.VersionTLS12
config.PreferServerCipherSuites = true
References:
See also : Golang : Use modern ciphers only in secure connection
By Adam Ng
IF you gain some knowledge or the information here solved your programming problem. Please consider donating to the less fortunate or some charities that you like. Apart from donation, planting trees, volunteering or reducing your carbon footprint will be great too.
Advertisement
Tutorials
+14k Golang : How to run Golang application such as web server in the background or as daemon?
+5.2k Golang : How to flush a channel before the end of program?
+4.2k Golang : Concatenate (combine) buffer data example
+9.6k Golang : Iterating Elements Over A List
+2k Golang : Gargish-English language translator
+32.2k Golang : How to get time in milliseconds?
+17.8k Golang : Convert integer to binary, octal, hexadecimal and back to integer
+18.8k Golang : How to create new XML file ?
+2.2k Golang : Pad file extension automagically
+9.1k Golang : Update database with GORM example
+4.7k Golang : Random Rune generator
+12k Golang : Linked list example