Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ENHANCEMENTS] Ability to Disable Weak Ciphers in ACME Registration Menu #379

Open
wreid23 opened this issue Nov 6, 2024 · 1 comment
Open
Assignees
Labels
enhancement New feature or request

Comments

@wreid23
Copy link

wreid23 commented Nov 6, 2024

Is your feature request related to a problem? Please describe.
Would like the ability to disable Weak Cyphers via gui if possible.

Describe the solution you'd like
Show the Ciphers Used in Registration or After Registration and allow us to disable the Weak ones and or remove them as some of the other reverse proxies have already done. (Caddy for Example)

Specifically:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 256
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 112

{F0748DEC-11EC-402C-90FE-715BEB2775AB}

Describe alternatives you've considered
Option A: hard removal by you (which is probably something worth considering as its already pretty good out of the box but this can get alot of people to A+ SSL Security on SSLLabs without thinking about it and button up a common attack vector

Option B: Some way to disable on registration in advanced menu:

Show list of the ciphers in gui::
https://caddyserver.com/docs/caddyfile/directives/tls
https://caddyserver.com/docs/caddyfile/directives/tls#ciphers

Option C: Using Existing Acme Registration submenu:
Cyphers that will be used is shown or we can type list of accepted cyphers like an advanced header in a text box
https://caddyserver.com/docs/caddyfile/directives/tls#ciphers

Additional context
Add any other context or screenshots about the feature request here.

@wreid23 wreid23 added the enhancement New feature or request label Nov 6, 2024
@tobychui
Copy link
Owner

tobychui commented Nov 6, 2024

@yeungalan I have no idea about whats that as I am not an expert in networking, I will let you handle that :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants