Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

weak tls config on demo1 #514

Closed
baszoetekouw opened this issue May 8, 2024 · 3 comments · Fixed by #530
Closed

weak tls config on demo1 #514

baszoetekouw opened this issue May 8, 2024 · 3 comments · Fixed by #530
Milestone
v35

Comments

@baszoetekouw
Copy link
Member

tls 1.0 etc
@FlorisFokkinga FlorisFokkinga moved this from New to Todo in SRAM development May 17, 2024
@baszoetekouw baszoetekouw assigned mrvanes and unassigned baszoetekouw Jun 28, 2024
@mrvanes mrvanes linked a pull request Jul 1, 2024 that will close this issue
Fix demo1 weak TLS config #530
Merged
@mrvanes mrvanes moved this from Todo to To be tested in SRAM development Jul 1, 2024
@mrvanes
Copy link
Contributor

mrvanes commented Jul 1, 2024

https://www.ssllabs.com/ssltest/analyze.html?d=demo1.sram.surf.nl

@baszoetekouw baszoetekouw added this to the v35 milestone Aug 6, 2024
@baszoetekouw
Copy link
Member Author

More fixes in 7798914

@baszoetekouw
Copy link
Member Author

tested:

 Testing protocols via sockets except NPN+ALPN

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      not offered
 TLS 1.1    not offered
 TLS 1.2    not offered
 TLS 1.3    offered (OK): final
 NPN/SPDY   not offered
 ALPN/HTTP2 http/1.1 (offered)

 Testing cipher categories

 NULL ciphers (no encryption)                  not offered (OK)
 Anonymous NULL Ciphers (no authentication)    not offered (OK)
 Export ciphers (w/o ADH+NULL)                 not offered (OK)
 LOW: 64 Bit + DES, RC[2,4] (w/o export)       not offered (OK)
 Triple DES Ciphers / IDEA                     not offered
 Obsolete CBC ciphers (AES, ARIA etc.)         not offered
 Strong encryption (AEAD ciphers)              offered (OK)

@baszoetekouw baszoetekouw moved this from To be tested to To be deployed in SRAM development Aug 6, 2024
@sram-deploy-tools-automation sram-deploy-tools-automation bot moved this from To be deployed to Done in SRAM development Aug 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
SRAM development
Archived in project
Milestone
v35
Development

Successfully merging a pull request may close this issue.

Fix demo1 weak TLS config SURFscz/SRAM-deploy
2 participants
@baszoetekouw @mrvanes