search

erlef / security-wg

Repo for the Security Working Group
https://erlef.github.io/security-wg/
192 stars 17 forks source link

Revise ssl versions and ciphers hardening #18

Closed voltone closed 2 years ago

voltone commented 2 years ago

Right, the sample configuration was only tested with OTP 24. I did check the out-of-the-box score of prior versions.

I'll see if it is feasible to achieve the same configuration with ssl:cipher_suites/2 and ssl:filter_cipher_suites/2 on older versions. If not, I'll just add a note that this is 24 only. Or I can add an example with TLS 1.2 only for older releases, which should be easier: I wouldn't really recommend 1.3 on older OTP versions anyway.

voltone commented 2 years ago

I just tested it, going back as far as 22.2, and it seems to work just fine.

max-au commented 2 years ago

Given that we recommend OTP 22 as the lowest version, it makes sense.