1. 01 Mar, 2021 3 commits
  2. 26 Feb, 2021 1 commit
  3. 25 Feb, 2021 2 commits
    • David Luu's avatar
      Added flag for user configurable cipher suites · 1e625d00
      David Luu authored
      Configuration of list of cipher suites allows a user to disable use
      of weak ciphers or continue to support them for legacy usage if they
      so choose.
      
      List of available cipher suites at:
      https://golang.org/pkg/crypto/tls/#pkg-constants
      
      
      
      Default cipher suites have been updated to:
      - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
      - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - TLS_AES_128_GCM_SHA256
      - TLS_CHACHA20_POLY1305_SHA256
      - TLS_AES_256_GCM_SHA384
      
      MinimumTLS has also been updated to include TLS 1.3 as an option
      and now defaults to TLS 1.2 since 1.0 and 1.1 have been deprecated.
      Signed-off-by: default avatarDavid Luu <david@davidluu.info>
      1e625d00
    • Wang Yan's avatar
      Merge pull request #3222 from olegburov/bump-golang-alpine · 785fe625
      Wang Yan authored
      Bump Golang to `1.15`.
      785fe625
  4. 21 Feb, 2021 2 commits
  5. 19 Feb, 2021 1 commit
  6. 12 Feb, 2021 1 commit
  7. 10 Feb, 2021 1 commit
  8. 09 Feb, 2021 1 commit
  9. 08 Feb, 2021 1 commit
    • Sebastiaan van Stijn's avatar
      go.mod: change imports to github.com/distribution/distribution/v3 · 1d338749
      Sebastiaan van Stijn authored
      
      Go 1.13 and up enforce import paths to be versioned if a project
      contains a go.mod and has released v2 or up.
      
      The current v2.x branches (and releases) do not yet have a go.mod,
      and therefore are still allowed to be imported with a non-versioned
      import path (go modules add a `+incompatible` annotation in that case).
      
      However, now that this project has a `go.mod` file, incompatible
      import paths will not be accepted by go modules, and attempting
      to use code from this repository will fail.
      
      This patch uses `v3` for the import-paths (not `v2`), because changing
      import paths itself is a breaking change, which means that  the
      next release should increment the "major" version to comply with
      SemVer (as go modules dictate).
      Signed-off-by: default avatarSebastiaan van Stijn <github@gone.nl>
      1d338749
  10. 06 Feb, 2021 8 commits
  11. 05 Feb, 2021 1 commit
  12. 03 Feb, 2021 7 commits
  13. 02 Feb, 2021 5 commits
  14. 01 Feb, 2021 4 commits
  15. 30 Jan, 2021 1 commit
  16. 29 Jan, 2021 1 commit