Suboptimal TLS settings

[mdavids]

The TLS-settings seem suboptimal. For instance:

• TLS1.0 is offered
• TLS1.1 is offered
• Possibly vulnerable for BEAST attack
• Possibly vulnerable for SWEET32 attack
• Possibly vulerable to LUCKY13 attack

Is seems to me there is some room for improvement here.

[RyanBlakeIT]

I'm not very familiar with how to request code changes into Github, so below is the diff for argus5/master/src/argus/web/web.go that will resolve these issues:

12a13
>       "crypto/tls"
110a112,129
>               TLSConfig: &tls.Config{
>                       PreferServerCipherSuites: true,
>                       CurvePreferences: []tls.CurveID{
>                               tls.CurveP256,
>                               tls.X25519,
>                       },
>                       CipherSuites: []uint16{
>                               tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
>                               tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
>                               tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
>                               tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
>                               tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
>                               tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
>                               tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
>                               tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
>                       },
>                       MinVersion: tls.VersionTLS12,
>               },
112,114c131,133
<       s.services = append(s.services, www)
<       s.done.Add(1)
<       return www
---
>               s.services = append(s.services, www)
>               s.done.Add(1)
>               return www

Just need to recompile after making the above change.