summaryrefslogtreecommitdiffstats
path: root/ssl-config-generator
diff options
context:
space:
mode:
authorJulien Vehent <julien@linuxwall.info>2015-11-18 09:05:41 -0500
committerJulien Vehent <julien@linuxwall.info>2016-02-11 10:24:49 -0500
commita45a32fb3e60ccc2b759e90e3b285fb8a14daaed (patch)
tree13bfcfe9230c02f74da041c93bd7955de140f579 /ssl-config-generator
parent9ab495af37965b97727e28d993c3c8d1c3c666de (diff)
downloadserver-side-tls-a45a32fb3e60ccc2b759e90e3b285fb8a14daaed.zip
server-side-tls-a45a32fb3e60ccc2b759e90e3b285fb8a14daaed.tar.gz
server-side-tls-a45a32fb3e60ccc2b759e90e3b285fb8a14daaed.tar.bz2
V4: updated ciphersuites, publish guidelines as JSON
This commit is the result of several months of discussions and maturation. It represents the state of the art in TLS configurations. It has been rebased, but the history is shown below and can be read at: https://github.com/mozilla/server-side-tls/pull/97 - V4: updated levels, added JSON - Remove DHE from modern, add ChaCha20 - prefer aes256 in modern, add ecdh size parameter - Remove TLSv1.1 from modern level - Prefer AES256-GCM to ChaCha20 in modern configuration - Recommend ECDSAWithSHA384 as cert signature in modern conf - Remove unused document signature - Change recommended curve in Modern to P256 - Convert certificate types, curves and signatures to lists to support multiple acceptable values - readd EDH-RSA-DES-CBC3-SHA to intermediate and old - Add DHE-RSA-AES256-GCM-SHA384 to intermediate level - rename json keys - Revisit old ciphersuites - Update wiki document with latest recommendations and rationales - Add paragraph on certificates switching - Remove configuration samples & cleanup some stuff - reset changes to conf generator
Diffstat (limited to 'ssl-config-generator')
-rw-r--r--ssl-config-generator/index.html12
1 files changed, 6 insertions, 6 deletions
diff --git a/ssl-config-generator/index.html b/ssl-config-generator/index.html
index 82547f5..91d272a 100644
--- a/ssl-config-generator/index.html
+++ b/ssl-config-generator/index.html
@@ -460,12 +460,12 @@ $SERVER["socket"] == ":443" {
}
function renderConfig(change_software) {
- // Update Server version input w/ latest version in versions[] array when changing software
- var software = $("div#server-list input:radio:checked").val();
- if (change_software === true && typeof versions[software] !== "undefined") {
- $("#server-version").val(versions[software][versions[software].length-1]);
-
- };
+ // Update Server version input w/ latest version in versions[] array when changing software
+ var software = $("div#server-list input:radio:checked").val();
+ if (change_software === true && typeof versions[software] !== "undefined") {
+ $("#server-version").val(versions[software][versions[software].length-1]);
+
+ };
var data = {
serverVersion: $("#server-version").val(),