Provide TLS 1.3 only nginx configuration
ClosedPublic
Actions

Authored by dereckson on Dec 17 2023, 13:56.

Details

Reviewers

dereckson

Maniphest Tasks

T1228: Configure TLS for webserver-core role

Commits

rOPSe691945ff036: Provide TLS 1.3 only nginx configuration

Summary

The aeris CryptCheck service rates 'E' the current Mozilla intermediate
configuration.

This change provide a more modern configuration supporting only TLS 1.3
for services requiring strong security while blocking legacy clients.

Ref T1228.

Test Plan

nginx -t

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Dec 17 2023, 13:56

dereckson created this revision.

Harbormaster completed remote builds in B5129: Diff 8350.Dec 17 2023, 13:56

dereckson mentioned this in T1228: Configure TLS for webserver-core role.Dec 17 2023, 13:59

dereckson edited the summary of this revision. (Show Details)

dereckson added a task: T1228: Configure TLS for webserver-core role.

dereckson accepted this revision.Jan 14 2024, 10:28

This revision is now accepted and ready to land.Jan 14 2024, 10:28

Closed by commit rOPSe691945ff036: Provide TLS 1.3 only nginx configuration (authored by dereckson). · Explain WhyJan 14 2024, 10:31

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPSe691945ff036: Provide TLS 1.3 only nginx configuration.

Revision Contents
Changeset List

Path

Size

roles/

webserver-core/

nginx/

files/

includes/

tls-modern-only

63 lines

Diff 8436

View Options

roles/webserver-core/nginx/files/includes/tls-modern-only

Provide TLS 1.3 only nginx configurationClosedPublicActions