vbatts/registry
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
registry/docs
History
David Luu 1e625d0076 Added flag for user configurable cipher suites 
Configuration of list of cipher suites allows a user to disable use
of weak ciphers or continue to support them for legacy usage if they
so choose.

List of available cipher suites at:
https://golang.org/pkg/crypto/tls/#pkg-constants

Default cipher suites have been updated to:
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_AES_128_GCM_SHA256
- TLS_CHACHA20_POLY1305_SHA256
- TLS_AES_256_GCM_SHA384

MinimumTLS has also been updated to include TLS 1.3 as an option
and now defaults to TLS 1.2 since 1.0 and 1.1 have been deprecated.

Signed-off-by: David Luu <david@davidluu.info>
2021-02-25 14:19:56 -06:00
..
spec go.mod: change imports to github.com/distribution/distribution/v3 2021-02-08 18:30:46 +01:00
architecture.md Put architecture.md back into distribution repo 2017-05-23 11:24:11 -07:00
configuration.md Added flag for user configurable cipher suites 2021-02-25 14:19:56 -06:00
README.md Add back configuration.md and add clarification to README.md 2016-10-13 11:49:49 -07:00

README.md

The docs have been moved!

The documentation for Registry has been merged into the general documentation repo. Commit history has been preserved.

The docs for Registry are now here: https://github.com/docker/docker.github.io/tree/master/registry

Note: The definitive ./spec directory directory and configuration.md file will be maintained in this repository and be refreshed periodically in the general documentation repo.

As always, the docs in the general repo remain open-source and we appreciate your feedback and pull requests!