more restrictive tls ciphers

cmd/utils.go

@@ -5,6 +5,7 @@ import (
 	"crypto/x509"
 	"encoding/pem"
 	"io/ioutil"
+	"strings"
 )
 
 func loadPrivateKey(path string) (*rsa.PrivateKey, error) {
@@ -21,3 +22,7 @@ func loadPrivateKey(path string) (*rsa.PrivateKey, error) {
 
 	return privKey, nil
 }
+
+func signerFile(signerId string) string {
+	return strings.Replace(signerId, "@", "_at_", 1)
+}