[KUDU-1873] Audit TLS ciphers

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 1.3.0
• Component/s: rpc, security
• Labels: security
• Target Version/s: 1.3.0
• Assignee: Dan Burkert
• Reporter: Dan Burkert
• Created: 13/Feb/17 19:10
• Updated: 22/Feb/17 19:22
• Resolved: 22/Feb/17 19:22

Description

We should audit our cipher lists on the server and client, making sure to disable known-insecure ciphers (DES, 3DES), and making sure to prioritize secure and high-performance ciphers (AES-GCM). In particular, the default cipher lists are very different across the system version of OpenSSL we support.