Skip to content

fix(tls) fix ciphers - #21545

Merged
Jarred-Sumner merged 35 commits into
mainfrom
ciro/fix-tls-ciphers
Aug 5, 2025
Merged

Jarred-Sumner merged 35 commits into
mainfrom
ciro/fix-tls-ciphers

Conversation

@cirospaciari

@cirospaciari cirospaciari commented Aug 1, 2025 •

Copy link
Copy Markdown
Member

What does this PR do?

Uses same ciphers than node.js for compatibility and do the same error checking on empty ciphers
Fixes #9425
Fixes #21518
Fixes #19859
Fixes #18980

You can see more about redis ciphers here https://redis.io/docs/latest/operate/rs/security/encryption/tls/ciphers/ this should fix redis related ciphers issues

How did you verify your code works?

Tests

@robobun

robobun commented Aug 1, 2025 •

Copy link
Copy Markdown
Collaborator
Updated 4:09 PM PT - Aug 4th, 2025

❌ @cirospaciari, your commit 3caf845 has 5 failures in Build #22185:


🧪   To try this PR locally:

bunx bun-pr 21545

That installs a local version of the PR into your bun-21545 executable, so you can run:

bun-21545 --bun

@cirospaciari
cirospaciari marked this pull request as ready for review August 2, 2025 00:45
@Jarred-Sumner
Jarred-Sumner merged commit ed6f099 into main Aug 5, 2025
@Jarred-Sumner
Jarred-Sumner deleted the ciro/fix-tls-ciphers branch August 5, 2025 02:42
@devcaeg

devcaeg commented Aug 11, 2025

Copy link
Copy Markdown

Is this PR merged into Bun v1.2.0? Since in my case it has not solved the connection problem.

robobun added a commit that referenced this pull request Sep 7, 2026
…hers

An SSLConfig built without a `ciphers` option falls back to the list
assigned through `tls.DEFAULT_CIPHERS`, in the one native place every
TLS consumer goes through (tls.createServer, https.createServer,
createSecureContext, Bun.serve, Bun.listen). #21545 added this fallback
in SSLConfig.fromJS and the bindgen port (#23169) dropped it, so only
tls.connect (which passes the default explicitly) still honoured it.
A default list with no TLS 1.2 cipher left raises the protocol floor
to TLS 1.3, like Node's configSecureContext.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

4 participants