EGI-Federation / EGI-Federation/documentation
Document some security guidelines for VM deployed on Cloud Compute
- Dominant language
- HTML
- Stars
- 15
- Forks
- 52
- Avg merge
- 12h 34m
- Merged PRs (30d)
- 2
Description
We could provide some security guidelines to Cloud Compute users, as an example:
* if a service is ACTIVE on port 80 THERE MUST BE a redirection (automatically or not)
to port 443
* if a service is ACTIVE on port 443 MUST
* ACCEPT only the following protocols:
* TLS 1.2
* TLS 1.3
* REJECT the following protocols
* SSLv2
* SSLv3
* TLS1
* TLS1.1
The following tools are available:
* to safely configure the server: https://ssl-config.mozilla.org/
* to check the solution adopted: https://github.com/drwetter/testssl.sh/tree/3.0
Reference https://ggus.eu/index.php?mode=ticket_info&ticket_id=159474.
Thoughts/opionons?
Contributor guide
Assessment
This issue has not been assessed yet.