ssl_config.nim 2.4 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152
  1. # This file was automatically generated by tools/ssl_config_parser on 2020-06-03T22:02:05Z. DO NOT EDIT.
  2. ## This module contains SSL configuration parameters obtained from
  3. ## `Mozilla OpSec <https://wiki.mozilla.org/Security/Server_Side_TLS>`_.
  4. ##
  5. ## The configuration file used to generate this module: https://ssl-config.mozilla.org/guidelines/5.4.json
  6. const CiphersModern* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"
  7. ## An OpenSSL-compatible list of secure ciphers for ``modern`` compatibility
  8. ## per Mozilla's recommendations.
  9. ##
  10. ## Oldest clients supported by this list:
  11. ## * Firefox 63
  12. ## * Android 10.0
  13. ## * Chrome 70
  14. ## * Edge 75
  15. ## * Java 11
  16. ## * OpenSSL 1.1.1
  17. ## * Opera 57
  18. ## * Safari 12.1
  19. const CiphersIntermediate* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
  20. ## An OpenSSL-compatible list of secure ciphers for ``intermediate`` compatibility
  21. ## per Mozilla's recommendations.
  22. ##
  23. ## Oldest clients supported by this list:
  24. ## * Firefox 27
  25. ## * Android 4.4.2
  26. ## * Chrome 31
  27. ## * Edge
  28. ## * IE 11 on Windows 7
  29. ## * Java 8u31
  30. ## * OpenSSL 1.0.1
  31. ## * Opera 20
  32. ## * Safari 9
  33. const CiphersOld* = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
  34. ## An OpenSSL-compatible list of secure ciphers for ``old`` compatibility
  35. ## per Mozilla's recommendations.
  36. ##
  37. ## Oldest clients supported by this list:
  38. ## * Firefox 1
  39. ## * Android 2.3
  40. ## * Chrome 1
  41. ## * Edge 12
  42. ## * IE8 on Windows XP
  43. ## * Java 6
  44. ## * OpenSSL 0.9.8
  45. ## * Opera 5
  46. ## * Safari 1