Review SSL cipher configuration
@arlake228 is already working on this.
Since Apr 4, 2017.
- Dominant language
- JavaScript
- Stars
- 37
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
From #33 -- a PR which I have closed, as we don't seem to agree with that approach, but capturing that we need to review which SSL ciphers are allowed in our configuration.
@tonin suggested
Should we go for Mozilla, or others, recommendations? For example using the Intermediate or Modern compatibility list from https://wiki.mozilla.org/Security/Server_Side_TLS
This looks like a good approach to me. We also need to periodically review this configuration (possibly with each release?) We should discuss, and create tickets if appropriate.
The SSL configuration is handled here:
https://github.com/perfsonar/toolkit/blob/master/scripts/system_environment/disable_weak_ssl_ciphers
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.