search

mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
358 stars 59 forks source link

Traefik generation for Intermediate does not support IE11 on Windows 7 #103

Closed Kiina closed 4 years ago

Kiina commented 4 years ago

I tried configuring my server with the config and in the upper corner it tells me: Supports Firefox 27, Android 4.4.2, Chrome 31, Edge, IE 11 on Windows 7, Java 8u31, OpenSSL 1.0.1, Opera 20, and Safari 9. After a test and scan with ssllabs I found this to be not true

image

I think the mozilla prefered ciphers for ie11 are DHE-RSA-AES128-GCM-SHA256 and DHE-RSA-AES256-GCM-SHA384 but they aren't supported in go see #52 . So maybe a warning would be good that the build config doesn't support these systems due to missing DHE ciphers?

Kiina commented 4 years ago

Ah nvm, it's the ECDHE issue mentioned a bit earlier. Letsencrypt was still giving me RSA certs, which don't work....