Merge pull request securego#135 from cosmincojocar/update_mondern_tls…

…_chipers Add the CHACHA20 to good ciphers in modern tls check
holyspectral · Oct 4, 2017 · 6de76c9 · 6de76c9
2 parents f22c701 + c36954f
commit 6de76c9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/rules/tls.go b/rules/tls.go
@@ -130,8 +130,10 @@ func NewModernTlsCheck(conf map[string]interface{}) (gas.Rule, []ast.Node) {
 		goodCiphers: []string{
 			"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
 			"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
+			"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
 			"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
 			"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+			"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
 		},
 	}, []ast.Node{(*ast.CompositeLit)(nil)}
 }