Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | intermediate dhe to 2048, note about java | Julien Vehent | 2015-05-27 | 1 | -3/+26 | |
| | ||||||
* | Merge branch 'gh-pages' of github.com:mozilla/server-side-tls into gh-pages | Julien Vehent | 2015-05-27 | 1 | -3/+3 | |
|\ | ||||||
| * | Merge pull request #65 from nextPrime/patch-2 | Julien Vehent | 2015-05-22 | 1 | -3/+3 | |
| |\ | | | | | | | Change some links to use HTTPS | |||||
| | * | Change some links to use HTTPS | nextPrime | 2015-05-22 | 1 | -3/+3 | |
| |/ | | | | | aws.amazon.com and en.wikipedia.org support HTTPS. So update these links to: https://aws.amazon.com/cloudformation/, https://aws.amazon.com/elasticloadbalancing/, and https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security. | |||||
* | | add note about 2048 DHE in intermediate ciphersuite | Julien Vehent | 2015-05-27 | 1 | -1/+1 | |
|/ | ||||||
* | update phrasing on weakdh issue | Julien Vehent | 2015-05-20 | 1 | -2/+3 | |
| | ||||||
* | Merge pull request #64 from ameihm0912/gh-pages | Julien Vehent | 2015-05-20 | 1 | -0/+6 | |
|\ | | | | | Add note regarding Logjam | |||||
| * | fix markup issue | Aaron Meihm | 2015-05-20 | 1 | -1/+1 | |
| | | ||||||
| * | add note about Logjam attack | Aaron Meihm | 2015-05-20 | 1 | -0/+6 | |
|/ | ||||||
* | Merge pull request #58 from nextPrime/patch-1 | Julien Vehent | 2015-05-20 | 1 | -1/+1 | |
|\ | | | | | Change HSTS header setting in Apache | |||||
| * | Change HSTS header setting in Apache | nextPrime | 2015-04-16 | 1 | -1/+1 | |
| | | | | | | Is it better to use "Header always set Strict-Transport-Security" than "Header always add Strict-Transport-Security", in order to prevent adding duplicate HSTS headers? | |||||
* | | add a README | Julien Vehent | 2015-05-20 | 1 | -0/+8 | |
| | | ||||||
* | | Add note about update doc and conf generator location. fixes #63. | Julien Vehent | 2015-05-20 | 1 | -0/+4 | |
| | | ||||||
* | | Add source of wiki page in repos | Julien Vehent | 2015-05-20 | 1 | -0/+2832 | |
|/ | ||||||
* | Adding a description to the AWS ELB config | Gene Wood | 2015-04-16 | 1 | -0/+4 | |
| | ||||||
* | Merge branch 'gh-pages' into tooltip-ui | Gene Wood | 2015-04-16 | 2 | -5/+187 | |
|\ | ||||||
| * | Merge pull request #55 from mozilla/ELB-templates | Gene Wood | 2015-04-16 | 2 | -4/+186 | |
| |\ | | | | | | | Adding ELB template generation | |||||
| | * | Adding ELB template generation | Gene Wood | 2015-04-16 | 2 | -4/+186 | |
| | | | ||||||
| * | | Clarifying HAProxy error message | Gene Wood | 2015-04-16 | 1 | -1/+1 | |
| |/ | ||||||
* | | Enable cross browser tooltip with jquery tooltip | Gene Wood | 2015-04-16 | 1 | -0/+4 | |
|/ | | | | | This fixes Safari not seeing the tooltip This doesn't solve mobile devices not being able to mouseover | |||||
* | Fixing typo bug of no ciphersuites shown | Gene Wood | 2015-04-15 | 1 | -3/+3 | |
| | ||||||
* | Merge pull request #53 from mozilla/add-autocomplete | Julien Vehent | 2015-04-15 | 1 | -1/+16 | |
|\ | | | | | Adding autocomplete versions | |||||
| * | Adding autocomplete versions | Gene Wood | 2015-04-15 | 1 | -1/+16 | |
|/ | | | | | This autocomplete allows for typing in values not present in the list which should accommodate new web server and openssl versions that come out over time Fixes #39 | |||||
* | Fixing mixed whitespace | Gene Wood | 2015-04-15 | 1 | -92/+97 | |
| | | | | Fixing permalink when fallbackprofile is used | |||||
* | Merge pull request #52 from mozilla/apache-pre-2.4.0-tls-versions | Gene Wood | 2015-04-15 | 1 | -52/+86 | |
|\ | | | | | Adding check for apache<2.4.0 | |||||
| * | Adding check for apache<2.4.0 | Gene Wood | 2015-04-15 | 1 | -52/+86 | |
|/ | | | | | | Restructuring profile data Changing default profile to intermediate Fixes #37 | |||||
* | Merge pull request #47 from mozilla/dh-param-for-old-profile | Julien Vehent | 2015-04-14 | 1 | -1/+9 | |
|\ | | | | | Max DH Key size is constrained by Java support | |||||
| * | Max DH Key size is constrained by Java support | Gene Wood | 2015-04-13 | 1 | -1/+9 | |
| | | | | | | | | Fixes #31 | |||||
* | | Change ssl_session_timeout to improve performance | Gene Wood | 2015-04-13 | 1 | -1/+1 | |
| | | | | | | | | | | This is recommended here : https://docs.google.com/presentation/d/1BH9DI1XlmukCzU2i8OvxLIfgQf_aGlZgZyvWDSyYyzs/present?slide=id.g41fa27ab0_4_18 Relates to PR #24 | |||||
* | | Merge pull request #50 from mozilla/remove-sslv2-apache-after-2.3.16 | Gene Wood | 2015-04-13 | 1 | -6/+14 | |
|\ \ | | | | | | | Remove sslv2 apache after 2.3.16 | |||||
| * \ | Merge branch 'gh-pages' into remove-sslv2-apache-after-2.3.16 | Gene Wood | 2015-04-13 | 1 | -11/+11 | |
| |\ \ | |/ / |/| | | ||||||
* | | | Merge pull request #49 from mozilla/add-defaults-to-query-link-lookup | Gene Wood | 2015-04-13 | 1 | -11/+11 | |
|\ \ \ | | | | | | | | | Moving defaults to loadFromQueryString and improving input validation | |||||
| * \ \ | Merge branch 'gh-pages' into add-defaults-to-query-link-lookup | Gene Wood | 2015-04-13 | 1 | -1/+14 | |
| |\ \ \ | |/ / / |/| | | | | | | | | | | | # Conflicts: # ssl-config-generator/index.html | |||||
| * | | | Moving defaults to loadFromQueryString and improving input validation | Gene Wood | 2015-04-13 | 1 | -11/+11 | |
| | |/ | |/| | ||||||
| | * | Fix UI : Disable modern profile even if another profile is selected | Gene Wood | 2015-04-13 | 1 | -5/+9 | |
| | | | ||||||
| | * | Remove sslv2 if the apache version is >= 2.3.16 | Gene Wood | 2015-04-13 | 1 | -1/+5 | |
| |/ |/| | ||||||
* | | Merge pull request #46 from mozilla/no-modern-for-old-openssl | Gene Wood | 2015-04-13 | 1 | -3/+16 | |
|\ \ | |/ |/| | Adding new semver test for OpenSSL grammar and code to disable `modern` profile for old versions of OpenSSL | |||||
| * | Adding comment about the different semver functions | Gene Wood | 2015-04-13 | 1 | -1/+2 | |
| | | | | | | | | Adding detail to message about modern profile being unavailable | |||||
| * | Adding new semver test for OpenSSL grammar and code to disable `modern` ↵ | Gene Wood | 2015-04-13 | 1 | -3/+15 | |
| | | | | | | | | | | | | | | profile for old versions of OpenSSL Setting more common default values for Apache and OpenSSL Resolves #26 | |||||
* | | Merge pull request #27 from mozilla/fix-SSLCertificateChainFile | Gene Wood | 2015-04-13 | 1 | -2/+7 | |
|\ \ | | | | | | | Conditionally displays SSLCertificateChainFile based on Apache version | |||||
| * | | Conditionally displays SSLCertificateChainFile based on Apache version | Gene Wood | 2015-02-26 | 1 | -2/+7 | |
| | | | | | | | | | | | | Resolves Issue #21 | |||||
* | | | Merge pull request #23 from MendelGusmao/permalinks | Julien Vehent | 2015-03-15 | 1 | -4/+35 | |
|\ \ \ | |_|/ |/| | | Implement 'permalinks' | |||||
| * | | Implement 'permalinks' | MendelGusmao | 2015-02-02 | 1 | -5/+36 | |
| |/ | ||||||
* | | Fixing my overzealous html cleanup so empty divs are valid | Gene Wood | 2015-02-26 | 1 | -2/+2 | |
| | | ||||||
* | | Fixing missing semi-colons and invalid input html | Gene Wood | 2015-02-26 | 1 | -17/+17 | |
|/ | ||||||
* | Moving link to github to the bottom of the page | Gene Wood | 2014-12-11 | 1 | -2/+1 | |
| | | | | Resolves #18 | |||||
* | Fixing broken responsive grids | Gene Wood | 2014-11-18 | 2 | -61/+56 | |
| | ||||||
* | Fixing bad escaping for HAProxy HSTS header based on PR #11 | Gene Wood | 2014-11-18 | 1 | -1/+1 | |
| | ||||||
* | Fixed styling copy paste mistakes and formatting based on PR #11 | Gene Wood | 2014-11-18 | 4 | -29/+98 | |
| | | | | Added tabzilla | |||||
* | Setting HSTS, when enabled, to always serve the header under Apache, even in ↵ | Gene Wood | 2014-11-18 | 1 | -1/+1 | |
| | | | | | | error pages and redirects. Resolves #16 | |||||
* | Adding comments about required modules for HSTS as well as a translation of ↵ | Gene Wood | 2014-11-18 | 1 | -3/+3 | |
| | | | | | | seconds to months Resolves #15 | |||||
* | This modifies PR #13 a bit so that nginx installations older than 0.7.14 ↵ | Gene Wood | 2014-11-18 | 1 | -1/+7 | |
| | | | | | | work correctly as the per `listen` directive ssl arguments weren't available at that point. Relates to Issue #12 | |||||
* | Adding a redirect to the https version of the site if it's accessed via http | Gene Wood | 2014-11-18 | 1 | -0/+4 | |
| | | | | Resolves #14 | |||||
* | Merge pull request #13 from neitsab/gh-pages | Jeff Bryner | 2014-11-09 | 1 | -2/+1 | |
|\ | | | | | Replace deprecated nginx 'ssl' directive with listen 'ssl' parameter | |||||
| * | Replace deprecated nginx 'ssl' directive with listen 'ssl' parameter | Bastien Traverse | 2014-11-09 | 1 | -2/+1 | |
|/ | ||||||
* | add mozilla license | Julien Vehent | 2014-11-06 | 1 | -0/+373 | |
| | ||||||
* | Adding a list of the oldest compatible clients for each profile | Gene Wood | 2014-11-05 | 1 | -2/+12 | |
| | | | | Resolves #2 | |||||
* | Make the code block text not spill outside | Gene Wood | 2014-11-05 | 1 | -0/+3 | |
| | | | Resolves #6 | |||||
* | Merge pull request #3 from mozilla/fix_ciphersuites | Gene Wood | 2014-11-05 | 1 | -2/+2 | |
|\ | | | | | minor ordering fixes to the modern and intermediate ciphersuites | |||||
| * | minor ordering fixes to the modern and intermediate ciphersuites | Julien Vehent | 2014-10-29 | 1 | -2/+2 | |
|/ | ||||||
* | Move the `ssl_trusted_certificate` directive from the apache config to the ↵ | Gene Wood | 2014-10-21 | 1 | -9/+8 | |
| | | | | | | nginx config. Fixes #1 | |||||
* | Moving ocspServerConfig outside VirtualHost to server config | Gene Wood | 2014-10-20 | 1 | -1/+3 | |
| | | | | http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslstaplingcache | |||||
* | Add a link to the github repo | Gene Wood | 2014-10-18 | 1 | -0/+1 | |
| | ||||||
* | cleanup fonts and add a link to the wiki | Gene Wood | 2014-10-18 | 1 | -9/+11 | |
| | ||||||
* | initial github pages commit of ssl-config-generator | Gene Wood | 2014-10-18 | 2 | -0/+570 | |