Sopho Merkviladze 26d6c35b1b daemon: optionally enforce strong TLS ciphers via environment variable ...

Introduce the DOCKER_DISABLE_WEAK_CIPHERS environment variable to allow
disabling weak TLS ciphers. When set to true, the daemon restricts
TLS to a modern, secure subset of cipher suites, disabling known weak
ciphers such as CBC-mode ciphers.

This is intended as an edge-case option and is not exposed via a CLI flag or
config option. By default, weak ciphers remain enabled for backward compatibility.

Signed-off-by: Sopho Merkviladze <smerkviladze@mirantis.com>

2025-10-07 21:24:07 +04:00

..

docker-proxy

cmd/docker-proxy: format code with gofumpt

2023-06-29 00:25:22 +02:00

dockerd

daemon: optionally enforce strong TLS ciphers via environment variable

2025-10-07 21:24:07 +04:00