From 2eba3967b2085b28f24f20e34c82115ba7872415 Mon Sep 17 00:00:00 2001 From: Hannes Laimer Date: Tue, 11 Jan 2022 12:39:36 +0100 Subject: [PATCH] proxy: use ciphers from config if set Signed-off-by: Hannes Laimer --- src/bin/proxmox-backup-proxy.rs | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/src/bin/proxmox-backup-proxy.rs b/src/bin/proxmox-backup-proxy.rs index 903dd9bc..909a4b41 100644 --- a/src/bin/proxmox-backup-proxy.rs +++ b/src/bin/proxmox-backup-proxy.rs @@ -342,7 +342,17 @@ fn make_tls_acceptor() -> Result { let key_path = configdir!("/proxy.key"); let cert_path = configdir!("/proxy.pem"); + let (config, _) = proxmox_backup::config::node::config()?; + let ciphers_tls13 = config.ciphers_tls13; + let ciphers_tls12 = config.ciphers_tls12; + let mut acceptor = SslAcceptor::mozilla_intermediate_v5(SslMethod::tls()).unwrap(); + if let Some(ciphers) = ciphers_tls13.as_deref() { + acceptor.set_ciphersuites(ciphers)?; + } + if let Some(ciphers) = ciphers_tls12.as_deref() { + acceptor.set_cipher_list(ciphers)?; + } acceptor.set_private_key_file(key_path, SslFiletype::PEM) .map_err(|err| format_err!("unable to read proxy key {} - {}", key_path, err))?; acceptor.set_certificate_chain_file(cert_path) -- 2.39.2