disable rc4 and other weak ciphers on https proxy - Githubissues

webida / webida-server

Webida Opensource Project - Server Repository

Apache License 2.0

7 stars 16 forks source link

disable rc4 and other weak ciphers on https proxy #193

Open gotchazipc opened 8 years ago

gotchazipc commented 8 years ago

pass https://www.ssllabs.com/ssltest/analyze.html?d=auth.webida.org&latest

RC4 is not safe. deprecated all weak-ciphers of proxy server

since proxy server uses http-master & it supports 'disableWeakCiphers'. Turn it on in proxy server code
remove unused, confusing http/https server props of Proxy Server class
cannot see logs. Enable logging via webida common logger class