Web Server and SSH Config Updates
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 37
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Jisc observed the following security problems during a recent scan that could stand to be updated:
The html report inside the zip says:
• 142960 (1) - HSTS Missing From HTTPS Server (RFC 6797)
• 70658 (1) - SSH Server CBC Mode Ciphers Enabled
• 153953 (1) - SSH Weak Key Exchange Algorithms Enabled
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the toolkit's web server and SSH configuration; the issue does not name specific files or entry points. Review how HTTPS and SSH settings are configured, then rerun the relevant security scan to confirm that HSTS is enabled and the listed CBC ciphers and weak key-exchange algorithms are disabled.
Written by the indexing model from the issue text.
Assessment
- Domain
- infrastructure, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100