minio/docs
Andreas Auernhammer 14876a4df1
ldap: use custom TLS cipher suites (#20221)
This commit replaces the LDAP client TLS config and
adds a custom list of TLS cipher suites which support
RSA key exchange (RSA kex).

Some LDAP server connections experience a significant slowdown
when these cipher suites are not available. The Go TLS stack
disables them by default. (Can be enabled via GODEBUG=tlsrsakex=1).

fixes https://github.com/minio/minio/issues/20214

With a custom list of TLS ciphers, Go can pick the TLS RSA key-exchange
cipher. Ref:
```
	if c.CipherSuites != nil {
		return c.CipherSuites
	}
	if tlsrsakex.Value() == "1" {
		return defaultCipherSuitesWithRSAKex
	}
```
Ref: https://cs.opensource.google/go/go/+/refs/tags/go1.22.5:src/crypto/tls/common.go;l=1017

Signed-off-by: Andreas Auernhammer <github@aead.dev>
2024-08-07 05:59:47 -07:00
..
auditlog fix: Filter out cust. AssumeRole Token for audit (#19646) 2024-05-01 14:31:13 -07:00
batch-jobs feat: implement support batch replication (#15554) 2022-10-05 23:00:43 -07:00
bigdata Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
bucket list: Hide objects/versions with pending/failed replicated deletion (#20047) 2024-07-09 15:26:42 -07:00
chroot Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
compression Improve handling of compression inclusion for objects (#19234) 2024-03-11 04:55:34 -07:00
config heal: calculate the number of workers based on NRRequests (#17945) 2023-09-11 14:48:54 -07:00
debugging Add actual inline data to JSON output in xl-meta (#19958) 2024-06-20 07:46:44 -07:00
distributed tests: Fix minor issue in the config yaml file testing (#20005) 2024-06-28 02:06:49 -07:00
docker Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
erasure update grafana dashboard with disk -> drive rename (#17857) 2023-08-15 16:04:20 -07:00
extensions doc: add Content-Type to s3zip (#19455) 2024-04-10 09:28:27 -07:00
federation/lookup Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
ftp Support user certificate based authentication on SFTP (#19650) 2024-05-06 23:41:25 -07:00
iam protect workers and simplify use of atomics (#19982) 2024-06-24 18:15:27 -07:00
integrations/veeam Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
kms add codespell action (#18818) 2024-01-17 23:03:17 -08:00
lambda Remove ~ from Object Lambda curl example (#16966) 2023-04-04 12:15:28 -07:00
logging results must be a single channel to avoid overwriting healing.bin (#19702) 2024-05-09 10:15:03 -07:00
metrics Docs: link to prom collector repo for info on debug metrics (#20209) 2024-08-02 15:30:11 -07:00
multi-tenancy Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
multi-user check for quorum errors for DeleteBucket() (#16859) 2023-03-20 23:38:06 -07:00
orchestration Update yaml files to latest version RELEASE.2024-08-03T04-33-23Z 2024-08-03 08:48:40 +00:00
screenshots feat: Deprecate embedded browser and import console (#12460) 2021-06-17 20:27:04 -07:00
security cleanup markdown docs across multiple files (#14296) 2022-02-11 16:51:25 -08:00
select Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
site-replication fix replication of checksum when encryption is enabled (#20161) 2024-07-29 01:02:16 -07:00
sts ldap: use custom TLS cipher suites (#20221) 2024-08-07 05:59:47 -07:00
throttle cleanup markdown docs across multiple files (#14296) 2022-02-11 16:51:25 -08:00
tls Update links to documentation site (#15750) 2022-09-28 21:28:45 -07:00
tuning fix tuned-adm command typo 2024-07-18 18:15:02 -07:00
hotfixes.md add customer specific hotfixes to 'registry.min.dev' (#19057) 2024-02-14 13:36:02 -08:00
LICENSE purge deprecate docker swarm documentation 2021-05-10 09:50:06 -07:00
minio-limits.md add codespell action (#18818) 2024-01-17 23:03:17 -08:00