Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a tool to generate the TLS configuration form Mozilla's ciphers recommendation #178

Merged
merged 5 commits into from
Feb 21, 2018
Merged

Add a tool to generate the TLS configuration form Mozilla's ciphers recommendation #178

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
3ddb7b4
Add a tool which generates the TLS rule configuration from Mozilla se…
ccojocar Feb 19, 2018
acbcb6d
Update README
ccojocar Feb 19, 2018
f16b18e
Remove trailing space in README
ccojocar Feb 19, 2018
015e516
Update dependencies
ccojocar Feb 19, 2018
338f228
Fix the commends of the generated functions
ccojocar Feb 19, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update README
  • Loading branch information
@ccojocar
ccojocar committed Feb 19, 2018
commit acbcb6d317de2ed0a4a1b053dc7efc0531179d34
18 changes: 18 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -114,3 +114,21 @@ file. The output format is controlled by the '-fmt' flag, and the output file is
$ gas -fmt=json -out=results.json *.go
```

### Generate TLS rule

The configuration of TLS rule can be generated from [Mozilla's TLS ciphers recommendation](https://statics.tls.security.mozilla.org/server-side-tls-conf.json).


First you need to install the generator tool:

```
go get github.com/GoASTScanner/gas/cmd/tlsconfig/...
```

You can invoke now the `go generate` in the root of the project:

```
go generate ./...
```

This will generate the `rules/tls_config.go` file with will contain the current ciphers recommendation from Mozilla.