Add support for specifying SSL Ciphers (#69)

* Default to using secure TLS ciphers * Add support for specifying SSL Ciphers
kadalu · Jun 9, 2023 · d923532 · d923532
1 parent 09c3561
commit d923532
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/gdash/__main__.py b/gdash/__main__.py
@@ -173,6 +173,9 @@ def get_args():
     parser.add_argument(
         "--ssl-ca", default=None, help=("Path to SSL CA Certificate used by Gdash")
     )
+    parser.add_argument(
+        "--ssl-ciphers", default=None, help=("List of SSL Ciphers to allow")
+    )
 
     return parser.parse_args()
 
@@ -204,6 +207,9 @@ def main():
     if ARGS.ssl_ca:
         cherrypy_cfg["server.ssl_certificate_chain"] = ARGS.ssl_ca
 
+    if ARGS.ssl_ciphers:
+        cherrypy_cfg["server.ssl_ciphers"] = ARGS.ssl_ciphers
+
     if ARGS.ssl_cert and ARGS.ssl_key:
         cherrypy_cfg["server.ssl_module"] = "builtin"