diff --git a/src/openssl/ssl/defaults.cr b/src/openssl/ssl/defaults.cr index 79d9f5bec952..6cccb707faa1 100644 --- a/src/openssl/ssl/defaults.cr +++ b/src/openssl/ssl/defaults.cr @@ -1,5 +1,5 @@ # THIS FILE WAS AUTOMATICALLY GENERATED BY script/ssl_server_defaults.cr -# on 2020-10-09 20:33:59 UTC. +# on 2023-07-21 10:32:46 UTC. abstract class OpenSSL::SSL::Context # The list of secure ciphers on **modern** compatibility level as per Mozilla @@ -15,8 +15,8 @@ abstract class OpenSSL::SSL::Context # * Opera 57 # * Safari 12.1 # - # This list represents version 5.6 of the modern configuration - # available at https://ssl-config.mozilla.org/guidelines/5.6.json. + # This list represents version 5.7 of the modern configuration + # available at https://ssl-config.mozilla.org/guidelines/5.7.json. # # See https://wiki.mozilla.org/Security/Server_Side_TLS for details. CIPHERS_MODERN = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS" @@ -34,8 +34,8 @@ abstract class OpenSSL::SSL::Context # * Opera 57 # * Safari 12.1 # - # This list represents version 5.6 of the modern configuration - # available at https://ssl-config.mozilla.org/guidelines/5.6.json. + # This list represents version 5.7 of the modern configuration + # available at https://ssl-config.mozilla.org/guidelines/5.7.json. # # See https://wiki.mozilla.org/Security/Server_Side_TLS for details. CIPHER_SUITES_MODERN = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" @@ -54,11 +54,11 @@ abstract class OpenSSL::SSL::Context # * Opera 20 # * Safari 9 # - # This list represents version 5.6 of the intermediate configuration - # available at https://ssl-config.mozilla.org/guidelines/5.6.json. + # This list represents version 5.7 of the intermediate configuration + # available at https://ssl-config.mozilla.org/guidelines/5.7.json. # # See https://wiki.mozilla.org/Security/Server_Side_TLS for details. - CIPHERS_INTERMEDIATE = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS" + CIPHERS_INTERMEDIATE = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS" # The list of secure ciphersuites on **intermediate** compatibility level as per Mozilla # recommendations. @@ -74,8 +74,8 @@ abstract class OpenSSL::SSL::Context # * Opera 20 # * Safari 9 # - # This list represents version 5.6 of the intermediate configuration - # available at https://ssl-config.mozilla.org/guidelines/5.6.json. + # This list represents version 5.7 of the intermediate configuration + # available at https://ssl-config.mozilla.org/guidelines/5.7.json. # # See https://wiki.mozilla.org/Security/Server_Side_TLS for details. CIPHER_SUITES_INTERMEDIATE = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" @@ -94,8 +94,8 @@ abstract class OpenSSL::SSL::Context # * Opera 5 # * Safari 1 # - # This list represents version 5.6 of the old configuration - # available at https://ssl-config.mozilla.org/guidelines/5.6.json. + # This list represents version 5.7 of the old configuration + # available at https://ssl-config.mozilla.org/guidelines/5.7.json. # # See https://wiki.mozilla.org/Security/Server_Side_TLS for details. CIPHERS_OLD = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS" @@ -114,8 +114,8 @@ abstract class OpenSSL::SSL::Context # * Opera 5 # * Safari 1 # - # This list represents version 5.6 of the old configuration - # available at https://ssl-config.mozilla.org/guidelines/5.6.json. + # This list represents version 5.7 of the old configuration + # available at https://ssl-config.mozilla.org/guidelines/5.7.json. # # See https://wiki.mozilla.org/Security/Server_Side_TLS for details. CIPHER_SUITES_OLD = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"