pages-server/certificates.go

19 lines
545 B
Go
Raw Normal View History

2021-03-16 23:34:31 +00:00
package main
import (
"crypto/tls"
"fmt"
)
// tlsConfig contains the configuration for generating, serving and cleaning up Let's Encrypt certificates.
var tlsConfig = &tls.Config{
GetCertificate: func(info *tls.ClientHelloInfo) (*tls.Certificate, error) {
// TODO: check DNS name & get certificate from Let's Encrypt
return nil, fmt.Errorf("NYI")
},
PreferServerCipherSuites: true,
// TODO: optimize cipher suites, minimum TLS version, etc.
}
// TODO: HSTS header with includeSubdomains & preload for MainDomainSuffix and RawDomain