New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use default ciphers in OpenSSL #1997

Open

fwsGonzo opened this issue Dec 3, 2018 · 1 comment

Labels

Member

fwsGonzo commented Dec 3, 2018

.. so that it works in more (if not all) places. Still disable SSLv3.

fwsGonzo added the Crypto label

Contributor

KristianJerpetjon commented Dec 3, 2018

https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ has the following list.

ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS

I think we should make it configurable from the service but with a sane default

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment