diff options
author | Julien Vehent <julien@linuxwall.info> | 2015-11-18 09:05:41 -0500 |
---|---|---|
committer | Julien Vehent <julien@linuxwall.info> | 2016-02-11 10:24:49 -0500 |
commit | a45a32fb3e60ccc2b759e90e3b285fb8a14daaed (patch) | |
tree | 13bfcfe9230c02f74da041c93bd7955de140f579 /ssl-config-generator | |
parent | 9ab495af37965b97727e28d993c3c8d1c3c666de (diff) | |
download | server-side-tls-a45a32fb3e60ccc2b759e90e3b285fb8a14daaed.zip server-side-tls-a45a32fb3e60ccc2b759e90e3b285fb8a14daaed.tar.gz server-side-tls-a45a32fb3e60ccc2b759e90e3b285fb8a14daaed.tar.bz2 |
V4: updated ciphersuites, publish guidelines as JSON
This commit is the result of several months of discussions and
maturation. It represents the state of the art in TLS configurations. It
has been rebased, but the history is shown below and can be read at:
https://github.com/mozilla/server-side-tls/pull/97
- V4: updated levels, added JSON
- Remove DHE from modern, add ChaCha20
- prefer aes256 in modern, add ecdh size parameter
- Remove TLSv1.1 from modern level
- Prefer AES256-GCM to ChaCha20 in modern configuration
- Recommend ECDSAWithSHA384 as cert signature in modern conf
- Remove unused document signature
- Change recommended curve in Modern to P256
- Convert certificate types, curves and signatures to lists to support multiple acceptable values
- readd EDH-RSA-DES-CBC3-SHA to intermediate and old
- Add DHE-RSA-AES256-GCM-SHA384 to intermediate level
- rename json keys
- Revisit old ciphersuites
- Update wiki document with latest recommendations and rationales
- Add paragraph on certificates switching
- Remove configuration samples & cleanup some stuff
- reset changes to conf generator
Diffstat (limited to 'ssl-config-generator')
-rw-r--r-- | ssl-config-generator/index.html | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/ssl-config-generator/index.html b/ssl-config-generator/index.html index 82547f5..91d272a 100644 --- a/ssl-config-generator/index.html +++ b/ssl-config-generator/index.html @@ -460,12 +460,12 @@ $SERVER["socket"] == ":443" { } function renderConfig(change_software) { - // Update Server version input w/ latest version in versions[] array when changing software - var software = $("div#server-list input:radio:checked").val(); - if (change_software === true && typeof versions[software] !== "undefined") { - $("#server-version").val(versions[software][versions[software].length-1]); - - }; + // Update Server version input w/ latest version in versions[] array when changing software + var software = $("div#server-list input:radio:checked").val(); + if (change_software === true && typeof versions[software] !== "undefined") { + $("#server-version").val(versions[software][versions[software].length-1]); + + }; var data = { serverVersion: $("#server-version").val(), |