Confirmed users
529
edits
Security/Server Side TLS: Difference between revisions
Jump to navigation
Jump to search
bump to version 3.3
(bump to version 3.3) |
|||
| Line 11: | Line 11: | ||
|- | |- | ||
| <span style="color:green;">'''READY'''</span> || | | <span style="color:green;">'''READY'''</span> || | ||
* Version 3.3: ulfr: fix SHA256 prio, add POODLE details, update various templates | |||
* Version 3.2: ulfr: Added intermediate compatibility mode, renamed other modes | * Version 3.2: ulfr: Added intermediate compatibility mode, renamed other modes | ||
* Version 3.1: ulfr: Added non-backward compatible ciphersuite | * Version 3.1: ulfr: Added non-backward compatible ciphersuite | ||
| Line 600: | Line 601: | ||
'modern':{}} | 'modern':{}} | ||
policy['old']['name'] = 'Mozilla-OpSec-TLS-Old-v-3- | policy['old']['name'] = 'Mozilla-OpSec-TLS-Old-v-3-3' | ||
policy['old']['ciphersuite'] = { | policy['old']['ciphersuite'] = { | ||
"ECDHE-ECDSA-AES128-GCM-SHA256": True, | "ECDHE-ECDSA-AES128-GCM-SHA256": True, | ||
| Line 697: | Line 698: | ||
# reuse the Old policy minus SSLv3 and 3DES | # reuse the Old policy minus SSLv3 and 3DES | ||
policy['intermediate']['name'] = 'Mozilla-OpSec-TLS-Intermediate-v-3- | policy['intermediate']['name'] = 'Mozilla-OpSec-TLS-Intermediate-v-3-3' | ||
policy['intermediate']['ciphersuite'] = policy['old']['ciphersuite'].copy() | policy['intermediate']['ciphersuite'] = policy['old']['ciphersuite'].copy() | ||
policy['intermediate']['ciphersuite'].update( | policy['intermediate']['ciphersuite'].update( | ||
| Line 703: | Line 704: | ||
# reuse the intermediate policy minus TLSv1 and non PFS ciphers | # reuse the intermediate policy minus TLSv1 and non PFS ciphers | ||
policy['modern']['name'] = 'Mozilla-OpSec-TLS-Modern-v-3- | policy['modern']['name'] = 'Mozilla-OpSec-TLS-Modern-v-3-3' | ||
policy['modern']['ciphersuite'] = policy['intermediate']['ciphersuite'].copy() | policy['modern']['ciphersuite'] = policy['intermediate']['ciphersuite'].copy() | ||
policy['modern']['ciphersuite'].update( | policy['modern']['ciphersuite'].update( | ||