tlsconfig

func BuildServerTLSConfig ¶

func BuildServerTLSConfig(minVersionFlag, cipherSuitesFlag string) (*tls.Config, string, error)

BuildServerTLSConfig builds a tls.Config for serving HTTPS.

Defaults:

• Minimum TLS version is TLS 1.2.
• Cipher suites and curve preferences are left unset to allow Go defaults (including TLS 1.3 cipher negotiation and updated curve defaults).

Flags: - minVersionFlag accepts: VersionTLS10|VersionTLS11|VersionTLS12|VersionTLS13 - cipherSuitesFlag is a comma-separated list of Go cipher suite names (TLS 1.2 only).

Returns (cfg, warning, err). A warning is returned when cipher suites are provided but ignored due to TLS 1.3 minimum.