yandex/odyssey

Improve TLS configuration

MaximZub opened this issue · 0 comments

MaximZub commented

I want to have more TLS options to be able to force using absolutely secure connections. Now Odyssey allows to connect even TLS 1.0 clients with very weak ciphers.

  1. Bug (?)
    Config file has option "tls_protocols" but as I see in the code it is NOT applied to connections. Moreover, it is not clear what format valid values should follow: "tls1.2" ?
  2. Suggestion:
    I would like Odyssey to have similar option as PostgreSQL : https://postgresqlco.nf/doc/en/param/ssl_ciphers/
    to be able to set desired cipher list