将自定义密码套件添加到 Istio 网关

Question

我在网关上添加了一些自定义密码套件，如下所示：

tls:
      mode: MUTUAL
      credentialName: sds
      minProtocolVersion: TLSV1_2
      maxProtocolVersion: TLSV1_3
      cipherSuites: [ECDHE-ECDSA-AES256-GCM-SHA384|ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-RSA-AES256-GCM-SHA384|ECDHE-RSA-AES128-GCM-SHA256|ECDHE-ECDSA-AES256-CBC-SHA384|ECDHE-ECDSA-AES128-CBC-SHA256|ECDHE-RSA-AES256-CBC-SHA384|ECDHE-RSA-AES128-CBC-SHA256]
    

有没有办法验证这些密码套件是否真的被添加了？它是否按照我们指定的方式排序？

Answer 1

以防万一您仍然想知道正确的格式是：

tls:
  mode: MUTUAL
  credentialName: sds
  minProtocolVersion: TLSV1_2
  maxProtocolVersion: TLSV1_3
  cipherSuites:
  - ECDHE-ECDSA-AES256-GCM-SHA384
  - ECDHE-ECDSA-AES128-GCM-SHA256
  - ECDHE-RSA-AES256-GCM-SHA384
  - ECDHE-RSA-AES128-GCM-SHA256
  - ECDHE-ECDSA-AES256-CBC-SHA384
  - ECDHE-ECDSA-AES128-CBC-SHA256
  - ECDHE-RSA-AES256-CBC-SHA384
  - ECDHE-RSA-AES128-CBC-SHA256