SSL Update - Githubissues

RuralIndia / pari

Sainath's People's Archive Of Rural India

BSD 3-Clause "New" or "Revised" License

22 stars 9 forks source link

SSL Update #156

Closed siddadel closed 9 years ago

siddadel commented 9 years ago

SSL Update - Our SSL setup is not up to date [1](an F grade on SSL Labs) and this may be an issue when we start processing payments. Probably, we should have our whole site served off SSL. Google provides more weight to SSL enabled sites.

JK>> Thanks for noticing this. SSL update should be done as a high priority task. Its fine to serve the entire site with https though there will be a little overhead on performance.

jayakumarc commented 9 years ago

Server overall rating is now 'A' as per SSLlabs's test

Changes made:

Upgraded to the OpenSSL version that addresses CVE-2014-0224.
Issues with RC4 cipher and PFS has been addressed by using mozilla recommended cipher suite.
Removed ssl_ecdh_curve parameter that prevents PFS in certain versions of Internet explorer.

Please note:

All the above changes should be accommodated as part of provisioning #157.
Enabling HSTS(would result in 'A+' rating as per SSLlab's test) is part of #164.

theju commented 9 years ago

Thanks @jayakumarc. Simply super!

siddadel commented 9 years ago

Really JK. The best!

Sent from my iPhone

On 28-Jan-2015, at 8:14 am, Thejaswi Puthraya notifications@github.com wrote:

Thanks @jayakumarc https://github.com/jayakumarc. Simply super!

— Reply to this email directly or view it on GitHub https://github.com/RuralIndia/pari/issues/156#issuecomment-71832655.

jayakumarc commented 9 years ago

Welcome @theju @siddadel !