Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
adds reading array of iana cipher suite strings to customize ciphers
this can be tested by setting either zowe.network.server.tls.ciphers or components.zss.zowe.network.server.tls.ciphers to an array of IANA cipher strings.
this PR also externalizes the default ciphers into defaults.yaml so people can see what they are, though its a little hard to read.
when _zss.mvdserver and _zss.httpserver log levels are set to debug (3) or higher, you will see printout about the behavior - which ciphers were requested and which maps were found, and what the final result is.
to test, i set up my yaml like this:
by uncommenting or commenting, and switching maxTls to 1.2 or 1.3, I was able to check the site details in firefox to see if the right ciphers were being used and at what tls level
my testing matched the config & debug output.