diff --git a/cmd/server-mux.go b/cmd/server-mux.go index 3ef812a5e..fe74d11d0 100644 --- a/cmd/server-mux.go +++ b/cmd/server-mux.go @@ -401,23 +401,8 @@ func (m *ServerMux) ListenAndServe(certFile, keyFile string) (err error) { // Causes servers to use Go's default ciphersuite preferences, // which are tuned to avoid attacks. Does nothing on clients. PreferServerCipherSuites: true, - // Only use curves which have assembly implementations - CurvePreferences: []tls.CurveID{ - tls.CurveP256, - }, // Set minimum version to TLS 1.2 MinVersion: tls.VersionTLS12, - CipherSuites: []uint16{ - tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, - tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, - tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, - tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, - - // Best disabled, as they don't provide Forward Secrecy, - // but might be necessary for some clients - // tls.TLS_RSA_WITH_AES_256_GCM_SHA384, - // tls.TLS_RSA_WITH_AES_128_GCM_SHA256, - }, } // Always instantiate. if tlsEnabled {