drogonframework / drogonframework/drogon

Help on setting up encrypted OpenSSL TLS/SSL connections

Open
#675 1 comment 0 reactions 1 assignee Assigned to @rbugajewski View on GitHub
enhancement
Dominant language
C++
Stars
14.3k
Forks
1.4k
Avg merge
1d 13h
Merged PRs (30d)
14

Description

**Is your feature request related to a problem? Please describe.**
Setting up some client side mitigation, adjusting `static_file_headers` is easily done with:
```json
"static_file_headers": [
{"name": "X-Content-Type-Options", "value":"nosniff"},
{"name":"X-Frame-Options", "value":"DENY"},
{"name":"Content-Security-Policy", "value":"default-src https: *.example.com data: 'unsafe-eval' ws: ; style-src https: 'unsafe-inline'; script-src https: *.example.com api.trusted-third-party.com 'unsafe-inline'; media-src 'none'; font-src https: *.example.com fonts.googleapis.com fonts.gstatic.com ; img-src https: *.pixyrouge.com data:"},
{"name":"Strict-Transport-Security","value":"max-age=63072000; includeSubDomains; preload"}
]
```
Next logical steps will be Perfect Forward Secrecy, OCSP stapling ...
but here I couldn't find any hints, in the docs, loooking at source code
I found trantor TcpConnectionImpl.cc but how user would extend it?
or am I missing something?

**Describe the solution you'd like**
something in the like:
https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=modern&openssl=1.1.1d&guideline=5.6

**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.

**Additional context**
Add any other context or screenshots about the feature request here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.