Andreas Auernhammer 14876a4df1 ldap: use custom TLS cipher suites (#20221) ... This commit replaces the LDAP client TLS config and adds a custom list of TLS cipher suites which support RSA key exchange (RSA kex). Some LDAP server connections experience a significant slowdown when these cipher suites are not available. The Go TLS stack disables them by default. (Can be enabled via GODEBUG=tlsrsakex=1). fixes https://github.com/minio/minio/issues/20214 With a custom list of TLS ciphers, Go can pick the TLS RSA key-exchange cipher. Ref: ``` if c.CipherSuites != nil { return c.CipherSuites } if tlsrsakex.Value() == "1" { return defaultCipherSuitesWithRSAKex } ``` Ref: https://cs.opensource.google/go/go/+/refs/tags/go1.22.5:src/crypto/tls/common.go;l=1017 Signed-off-by: Andreas Auernhammer <github@aead.dev>		2024-08-07 05:59:47 -07:00
..
config.go	ldap: use custom TLS cipher suites (#20221)	2024-08-07 05:59:47 -07:00
help.go	ldap: Add user DN attributes list config param (#19758)	2024-05-24 16:05:23 -07:00
ldap.go	Add DecodeDN and QuickNormalizeDN functions to LDAP config (#20076)	2024-07-11 18:04:53 -07:00
legacy.go	use LDAP config from minio/pkg to share with console (#15810)	2022-10-07 22:12:36 -07:00