Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update example server to use TLS 1.2 #56

Closed
igrigorik opened this issue Apr 13, 2016 · 1 comment
Closed

Update example server to use TLS 1.2 #56

igrigorik opened this issue Apr 13, 2016 · 1 comment

Comments

@igrigorik
Copy link
Owner

Existing implementation (example/server.rb) defaults to weak ciphersuite that triggers INADEQUATE_SECURITY in modern browsers. That said, I'm having a hard time navigating the Ruby OpenSSL implementation to figure out how to set all the right parameters: http://httpwg.org/specs/rfc7540.html#rfc.section.9.2.1

/cc @tenderlove @tarcieri perhaps you guys can help? :)

@tarcieri
Copy link

I had someone just today complaining about the OpenSSL extension's default ciphersuite list as well:

httprb/http#334

I've tried to make a few improvements in the past, e.g:

ruby/openssl#44

...but it's in definite need of a tune-up, as are the default TLS parameters.

/cc @zzak @nahi @emboss

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants