perfsonar / perfsonar/toolkit

Review SSL cipher configuration

Open
#97 12 comments 0 reactions 2 assignees View on GitHub

@arlake228 is already working on this.

Since Apr 4, 2017.

release-prep
Dominant language
JavaScript
Stars
37
Forks
7
PR merge metrics
No merged PRs in 30d

Description

From #33 -- a PR which I have closed, as we don't seem to agree with that approach, but capturing that we need to review which SSL ciphers are allowed in our configuration.

@tonin suggested

Should we go for Mozilla, or others, recommendations? For example using the Intermediate or Modern compatibility list from https://wiki.mozilla.org/Security/Server_Side_TLS

This looks like a good approach to me. We also need to periodically review this configuration (possibly with each release?) We should discuss, and create tickets if appropriate.

The SSL configuration is handled here:

https://github.com/perfsonar/toolkit/blob/master/scripts/system_environment/disable_weak_ssl_ciphers

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.