Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #9903 Update default configuration TLS cipher suites (beginning of 2017 edition)
    Actions
    Infos
    #9903
    Thomas Gerbet (tgerbet)
    2017-02-22 15:42
    2017-01-26 11:22
    10196
    Details
    Update default configuration TLS cipher suites (beginning of 2017 edition)
    We should follow the latest recommendation on the subject with the configuration we recommend or deliver by default.

    Mozilla guide on this topic is well written and choices are justified [1].


    [1] https://wiki.mozilla.org/Security/Server_Side_TLS
    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2017-02-22
    Attachments
    Empty
    References
    Referencing request #9903

    Artifact Tracker v5

    request #10924 Update default configuration TLS cipher suites (early 2018 edition)

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/08/7508/1' of ssh://gerrit.tuleap.net:29418/tuleap into stable d1a6cde3ec
    User avatar Nicolas Terray (nterray) , 2017-01-31 12:34
    request #9903: Update default configuration TLS cipher suites (beginning of 2017 edition) 00d28ad4eb
    User avatar Thomas Gerbet (tgerbet) , 2017-01-26 11:23
    request #9903: Update default configuration TLS cipher suites 0b50087785
    User avatar Thomas Gerbet (tgerbet) , 2017-01-30 14:02
    Referenced by request #9903

    Artifact Tracker v5

    rel #9810 9.4
    rel #9841 9.5

    Other

    gerrit #7508
    gerrit #7549
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2017-02-22 15:42
    Tuleap Realtime modification has also been integrated.
    • Status changed from Under implementation to Closed
    • Connected artifacts
    • Close date set to 2017-02-22
    User avatar
    Thomas Gerbet (tgerbet)2017-01-31 15:15
    nginx configuration in the documentation was already up to date.
    • Status changed from Reopen to Under implementation
    User avatar
    Thomas Gerbet (tgerbet)2017-01-26 11:35
    A patch updating the Apache configuration we deliver by default is under review: gerrit #7508.

    I'm also going to update the nginx configuration we propose in the documentation.