SIGN IN SIGN UP

Change cipher suite defaults to modern

This commit changes the defaults to using Mozilla modern
recommendations, and disables TLS1.2 support.  This should be a noop for
almost all uses, as any modern OS has had support for this cipher suite
for a very long time.  Mozilla intermediate is added still as a compile
time fallback in case some clients are impacted, but expectation is that
this is only a security increase for any client new enough to be worth
caring about.[1]

Tested:

Ran testssl.sh, and verified that the appropriate cipher suites and TLS
versions reported.

[1] https://caniuse.com/tls1-3

Change-Id: I31e51fabaa08e01d095035896a59b375b2e336f0
Signed-off-by: Ed Tanous <etanous@nvidia.com>
E
Ed Tanous committed
37b599b8693994749d37d663950392650748643e
Parent: a585072