search

tatsuhiro-t / spdylay

The experimental SPDY protocol version 2, 3 and 3.1 implementation in C
http://tatsuhiro-t.github.io/spdylay/
MIT License
603 stars 102 forks source link

Add --honor-cipher-order option to mitigate BEAST attacks #65

Closed moparisthebest closed 11 years ago

moparisthebest commented 11 years ago

This patch basically includes functionality Apache and lighttpd have, mainly to mitigate BEAST attacks.

Here is a link to the patch for lighttpd that was accepted a year ago:

http://redmine.lighttpd.net/issues/2364

The way I tested this was using shrpx as a reverse proxy for lighttpd, and using https://www.ssllabs.com/ssltest/index.html to test whether it worked or not.

tatsuhiro-t commented 11 years ago

Thank you. Merged and pushed just now.

moparisthebest commented 11 years ago

Oops, sorry, I didn't mean to sneak that drop privileges commit in there on you, I was going to put in a separate pull request for that, I hope you saw and approved of it too. :/

tatsuhiro-t commented 11 years ago

No problem. I reviewed all of the diffs and approved them.