Skip to content

Add opt-in support for insecure cipher suites in TLS config #13829

@dentonk

Description

@dentonk

Component(s)

configtls

Is your feature request related to a problem? Please describe.

There are times, typically when working with legacy solutions, when being able to support an insecure TLS cipher suite is required. Go has a list of insecure (but still better than nothing) cipher suites that are available, but currently the collector is only pulling in the fully "supported" cipher suites. Having an opt-in config to include the insecure ciphers would expand the range of supported data sources.

Describe the solution you'd like

Add an additional config parameter to the TLS config to allow users to opt-in to including the cipher suites returned by InsecureCipherSuites() in go.

Describe alternatives you've considered

No response

Additional context

No response

Tip

React with 👍 to help prioritize this issue. Please use comments to provide useful context, avoiding +1 or me too, to help us triage it. Learn more here.

Metadata

Metadata

Assignees

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions