drogonframework / drogonframework/drogon
Help on setting up encrypted OpenSSL TLS/SSL connections
- Dominant language
- C++
- Stars
- 14.3k
- Forks
- 1.4k
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 14
Description
**Is your feature request related to a problem? Please describe.**
Setting up some client side mitigation, adjusting `static_file_headers` is easily done with:
```json
"static_file_headers": [
{"name": "X-Content-Type-Options", "value":"nosniff"},
{"name":"X-Frame-Options", "value":"DENY"},
{"name":"Content-Security-Policy", "value":"default-src https: *.example.com data: 'unsafe-eval' ws: ; style-src https: 'unsafe-inline'; script-src https: *.example.com api.trusted-third-party.com 'unsafe-inline'; media-src 'none'; font-src https: *.example.com fonts.googleapis.com fonts.gstatic.com ; img-src https: *.pixyrouge.com data:"},
{"name":"Strict-Transport-Security","value":"max-age=63072000; includeSubDomains; preload"}
]
```
Next logical steps will be Perfect Forward Secrecy, OCSP stapling ...
but here I couldn't find any hints, in the docs, loooking at source code
I found trantor TcpConnectionImpl.cc but how user would extend it?
or am I missing something?
**Describe the solution you'd like**
something in the like:
https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=modern&openssl=1.1.1d&guideline=5.6
**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.
**Additional context**
Add any other context or screenshots about the feature request here.
Contributor guide
Assessment
This issue has not been assessed yet.