GUI server: disable support for insecure cyphers.

frankban commented 8 years ago

QA:

bootstrap a juju controller on ec2;
deploy this GUI branch (trusty incarnation) in there: make deploy SERIES=trusty;
wait for the GUI to be deployed;
go to your AWS management console and copy the dns public name for your "juju-default..." instance, something like ec2-52-59-34-212.eu-central-1.compute.amazonaws.com;
paste that address to the browser and check that, after accepting the self-signed cert, you can see the GUI login page;
paste that address also to the form at https://www.ssllabs.com/ssltest/analyze.html and start the check, click continue when asked about name mismatch (it will take a couple of minutes);
when test results are ready, check that we only support TLS, that no insecure ciphers can be used, and that RC4 is not supported;
done, destroy your aws controller, thank you!

jujugui commented 8 years ago

Test PASSed. Refer to this link for build results (access rights to CI server needed): http://ci.jujugui.org:8080//job/juju-gui-charm/141/ Test PASSed.

hatched commented 8 years ago

Thanks for this @frankban

:shipit:

jujugui commented 8 years ago

juju / juju-gui-charm