distribution/docs
David Luu cc341b0110 Added flag for user configurable cipher suites
Configuration of list of cipher suites allows a user to disable use
of weak ciphers or continue to support them for legacy usage if they
so choose.

List of available cipher suites at:
https://golang.org/pkg/crypto/tls/#pkg-constants

Default cipher suites have been updated to:
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_AES_128_GCM_SHA256
- TLS_CHACHA20_POLY1305_SHA256
- TLS_AES_256_GCM_SHA384

MinimumTLS has also been updated to include TLS 1.3 as an option
and now defaults to TLS 1.2 since 1.0 and 1.1 have been deprecated.

Signed-off-by: David Luu <david@davidluu.info>
2021-03-23 18:42:12 +08:00
..
spec docs: add redirect for old URL 2020-07-08 12:22:22 +02:00
README.md Add back configuration.md and add clarification to README.md 2016-10-13 11:49:49 -07:00
architecture.md Put architecture.md back into distribution repo 2017-05-23 11:24:11 -07:00
configuration.md Added flag for user configurable cipher suites 2021-03-23 18:42:12 +08:00

README.md

The docs have been moved!

The documentation for Registry has been merged into the general documentation repo. Commit history has been preserved.

The docs for Registry are now here: https://github.com/docker/docker.github.io/tree/master/registry

Note: The definitive ./spec directory directory and configuration.md file will be maintained in this repository and be refreshed periodically in the general documentation repo.

As always, the docs in the general repo remain open-source and we appreciate your feedback and pull requests!