Skip to content

Provide the option to choose which SSL config Mode is used #1251

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Nate-09 opened this issue Jul 21, 2021 · 1 comment
Closed

Provide the option to choose which SSL config Mode is used #1251

Nate-09 opened this issue Jul 21, 2021 · 1 comment

Comments

@Nate-09
Copy link

Nate-09 commented Jul 21, 2021

This might be more of two enhancements, however both related to one another, upon checking the current ssl-ciphers.conf file which shows that it uses the intermediate SSL configuration for nginx which contains weak ciphers, however for more secure environments or applications, it would be beneficial to provide a selector to allow what preference we prefer to use, i.e. modern or intermediate ssl configuration.

Alternatively being able to select or manually update the conf files from the UI to choose which ciphers are being provided on a per host level would resolve this individually.

For Example
If we can select which TLS v1.2 Ciphers are in use like the following image we reduce attack surface from using weak ciphers completely.
image

Instead of the current TLSv1.2 ciphers in the ssl-ciphers.conf which shows a number of weak ciphers.
image

I'm currently looking to manage the ciphers list manually to resolve this as a workaround based off of the #564

@Nate-09
Copy link
Author

Nate-09 commented Jul 22, 2021

Closing as there is another enhancement for the same request #951

@Nate-09 Nate-09 closed this as completed Jul 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant