Project

General

Profile

« Previous | Next » 

Revision b73b71a9

Added by Tomer Brisker about 8 years ago

Fixes #13747 - Allow configuration of dsabled SSL cipher suites

Added a :ssl_disabled_ciphers option to the settings allowing disabling
disallowed cipher suits in webrick.

View differences:

config/settings.yml.example
#:ssl_ca_file: ssl/certs/ca.pem
#:ssl_private_key: ssl/private_keys/fqdn.key
# Use this option only if you need to disable certain cipher suites.
# Note: we use the OpenSSL suite name, take a look at:
# https://www.openssl.org/docs/manmaster/apps/ciphers.html#CIPHER-SUITE-NAMES
# for more information.
#:ssl_disabled_ciphers: [CIPHER-SUITE-1, CIPHER-SUITE-2]
# Hosts which the proxy accepts connections from
# commenting the following lines would mean every verified SSL connection allowed
# HTTPS: test the certificate CN

Also available in: Unified diff