-
Notifications
You must be signed in to change notification settings - Fork 63
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Consume configuration for TLS from zowe.network.server #3569
Comments
Please use this code if it is helpful. I started to make changes for APIML but did not finish, and never figured out how to do ciphers. |
I have updated the branch to include info discovered in #3601. Keep in mind: zowe.yaml defines both client & server customization. server parameters: If component config, use. Else if global config, use. Else default. client parameters: If component config, use. Else if global config, use. Else if server component config, use. Else if server global config, use. Else default In effect, one can customize both server & client with server parameters alone, but can customize them separately if ever needed. |
Is your feature request related to a problem? Please describe.
The App Framework started supporting Zowe wide TLS configuration under zowe.network.server, to simplify configuration work, API ML should support the same.
zowe.network.server.listenAddresses
: This is an array of strings of IPv4 or IPv6 addresses that servers will be instructed to listen on.Default:
- "0.0.0.0"
zowe.network.server.tls.maxTls
: This is a string stating which TLS version to use as a maximum. The value can be one of "TLSv1.2", "TLSv1.3".Default: `TLSv1.3"
zowe.network.server.tls.minTls
: This is a string stating which TLS version to use as a minimum. The value can be one of "TLSv1.2", "TLSv1.3".Default: `TLSv1.2"
zowe.network.server.tls.ciphers
: This is an array of strings in the format of IANA cipher names. There are many possible values as seen here: https://testssl.sh/openssl-iana.mapping.htmlDefault: Changes regularly as needed for industry standards. A reference for likely ciphers is here: https://wiki.mozilla.org/Security/Server_Side_TLS
Describe the solution you'd like
Linked docs issue is - zowe/docs-site#3685
The text was updated successfully, but these errors were encountered: