Page MenuHomeDevCentral

Centralizes https configuration and force TLS only
ClosedPublic

Authored by dereckson on Nov 17 2014, 21:28.
Referenced Files
F3774957: D1.diff
Sun, Nov 24, 15:32
Unknown Object (File)
Sat, Nov 23, 15:17
Unknown Object (File)
Wed, Nov 6, 17:43
Unknown Object (File)
Mon, Nov 4, 17:43
Unknown Object (File)
Mon, Nov 4, 17:43
Unknown Object (File)
Mon, Nov 4, 16:58
Unknown Object (File)
Mon, Nov 4, 16:01
Unknown Object (File)
Sun, Nov 3, 03:23
Subscribers
None

Details

Summary

A lot of code used 'package require http'. This change removed these
requirements and perform once the inclusion in Core.tcl.

For https:// support, ::http::register is called after tls has been
initialized to disable default SSLv3 support (and SSLv2) and enable
TLSv1. That will allow modern post-POODLE SSL negotation compliance.

Reference:

Test Plan

Tested on P2#14 and live in Daeghrefn.

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

dereckson retitled this revision from to Centralizes https configuration and force TLS only.
dereckson updated this object.
dereckson edited the test plan for this revision. (Show Details)
dereckson added a reviewer: dereckson.
dereckson set the repository for this revision to rVIPERSERV ViperServ scripts [legacy Mercurial repo].
dereckson added a project: Dæghrefn.
dereckson changed the visibility from "All Users" to "Public (No Login Required)".
dereckson added inline comments.
Daeghrefn/Communication.tcl
143

Package base64 has been removed too here.

dereckson edited edge metadata.
dereckson set the repository for this revision to rVIPERSERV ViperServ scripts [legacy Mercurial repo].

Restoring base64 line (it could be another idea to require all packages in one place but that's another debate).

dereckson edited edge metadata.
This revision is now accepted and ready to land.Nov 17 2014, 22:18