Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSL/libssl only Allows to Disable Selected SSL/TLS Protocols #1254

Open
rdratlos opened this issue Apr 3, 2021 · 1 comment
Open

OpenSSL/libssl only Allows to Disable Selected SSL/TLS Protocols #1254

rdratlos opened this issue Apr 3, 2021 · 1 comment

Comments

@rdratlos
Copy link

rdratlos commented Apr 3, 2021

Cherokee Admin suggests system administrators that they have to enable wanted SSL/TLS protocols for traffic encryption. In general, OpenSSL accepts all SSL/TLS protocols requested by clients that are supported if the provided cipher set and certificates fit. Applications may disable selected (unsafe) protocols.

@skinkie
Copy link
Member

skinkie commented Apr 3, 2021

So your suggestion is here to negate the configuration options?

rdratlos pushed a commit to rdratlos/cherokee-webserver that referenced this issue Apr 3, 2021
Cherokee Admin suggests system administrators that they have to enable wanted
SSL/TLS protocols for traffic encryption. In general, OpenSSL accepts all
SSL/TLS protocols requested by clients that are supported if the provided cipher
set and certificates fit.

- Add a new checkbox widget type CheckCfgTextInv with following behaviour:
  ------------------------------------------
  |Checkbox Status|Configuration File Value|
  ------------------------------------------
  |    Checked    |           0            |
  ------------------------------------------
  |  Not Checked  |           1            |
  ------------------------------------------
- Update Cherokee Admin Advanced page to use the new checkbox
- Add a new style for Notice widgets:
  Slim boxes with 50% width compared to normal boxes

Fixes: cherokee#1254

Signed-off-by: Thomas Reim <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants