search

QubitProducts / exporter_exporter

A reverse proxy designed for Prometheus exporters
Apache License 2.0
338 stars 55 forks source link

SSL related vulnerabilities #54

Closed vinodmv555 closed 4 years ago

vinodmv555 commented 4 years ago

Hi Team,

Is there any option with exporter_exporter to fix below mentioned vulnerabilities ?

Expecting immediate response . Thanks in advance.

  1. SSL Version 2 and 3 Protocol detection.
    1. Red Protocal detection.
    2. SSL Medium strength Cipher suites supported (sweet32)

Thanks and Regards, Vinod M V

tcolgate commented 4 years ago

Adjusting the SSL options is a fairly easy update. You can raise a PR to update the minimum protocol version and cipher suites. I'll do it when I get a chance, but cannot provide any time frame. This application, as with all open source tools, is supported under a best effort basis and provides no warranty. Please keep that in mind, and do not demand responses or action to suite your own needs.

tcolgate commented 4 years ago

This should be resolved in 0.4.0