•  
      request #9903 Update default configuration TLS cipher suites (beginning of 2017 edition)
    Infos
    #9903
    Thomas Gerbet (tgerbet)
    2017-02-22 15:42
    2017-01-26 11:22
    10196
    Details
    Update default configuration TLS cipher suites (beginning of 2017 edition)
    We should follow the latest recommendation on the subject with the configuration we recommend or deliver by default.

    Mozilla guide on this topic is well written and choices are justified [1].


    [1] https://wiki.mozilla.org/Security/Server_Side_TLS
    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2017-02-22
    Attachments
    Empty
    References

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2017-02-22 15:42
    Tuleap Realtime modification has also been integrated.

    • Status changed from Under implementation to Closed
    • Connected artifacts
    • Close date set to 2017-02-22
    User avatar
    Thomas Gerbet (tgerbet)2017-01-31 15:15
    nginx configuration in the documentation was already up to date.

    • Status changed from Reopen to Under implementation
    User avatar
    Thomas Gerbet (tgerbet)2017-01-26 11:35
    A patch updating the Apache configuration we deliver by default is under review: gerrit #7508.

    I'm also going to update the nginx configuration we propose in the documentation.