Description
In ns_server
1. we need to update golang_ciphers to include new GO versions and update the ciphers list for all services
2. allow setting minimum TLS version on 1.3. for TLS1.3 capable services.
As an example, Query and indexing have moved to GOVERSION 1.13.7, hence we need to add golang ciphers for 1.13.7 version which includes TLS 1.3 ciphers.
Attachments
Issue Links
For Gerrit Dashboard: MB-42099 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
138347,5 | MB-42099: Update cipher list for n1ql, fts, and index service | master | ns_server | Status: MERGED | +2 | +1 |
138572,6 | MB-42099: Update cipher list for eventing service | master | ns_server | Status: MERGED | +2 | +1 |
138573,4 | MB-42099: Update cipher list for analytics service. | master | ns_server | Status: MERGED | +2 | +1 |
138700,3 | MB-42099: minTLSVersion can be tlsv1.3 | master | cbauth | Status: MERGED | +2 | +1 |
138731,2 | MB-42099: Add comments about golang treatment of TLS1.3 ciphers | master | ns_server | Status: MERGED | +2 | +1 |
138732,2 | MB-42099: Allow setting min TLS version of 1.3 for | master | ns_server | Status: MERGED | +2 | +1 |
138733,4 | MB-42099: Allow setting min TLS version of 1.3 for eventing | master | ns_server | Status: MERGED | +2 | +1 |
138772,2 | Revert: MB-42099: minTLSVersion can be tlsv1.3 | master | cbauth | Status: MERGED | +2 | +1 |
138779,2 | MB-42099: minTLSVersion can be tlsv1.3 | master | cbauth | Status: MERGED | +2 | +1 |
138782,2 | MB-42099: minTLSVersion can be TLS version 1.3 | master | cbas | Status: MERGED | +2 | +1 |
138845,4 | MB-42099: Add TLS1.3 ciphers to the high cipher strength list | master | ns_server | Status: MERGED | +2 | +1 |