Is there a list of supported TLS Ciphers for ETCD?

[NBK27]

Is there a list of supported TLS Ciphers for ETCD?

[jmhbnz]

Hey @NBK27 - Thanks for your question. etcd currently relies on the list of cipher suites provided by golang standard crypto/tls library, please refer to:

• https://cs.opensource.google/go/go/+/refs/tags/go1.20.7:src/crypto/tls/cipher_suites.go;l=53
• https://cs.opensource.google/go/go/+/refs/tags/go1.20.7:src/crypto/tls/cipher_suites.go;l=82

etcd/server/embed/config.go

Lines 226 to 229 in 1edd8ba

	// CipherSuites is a list of supported TLS cipher suites between
	// client/server and peers. If empty, Go auto-populates the list.
	// Note that cipher suites are prioritized in the given order.
	CipherSuites []string `json:"cipher-suites"`