Page MenuHomeDevCentral

Provide TLS 1.3 only nginx configuration
ClosedPublic

Authored by dereckson on Dec 17 2023, 13:56.
Tags
None
Referenced Files
F3926843: D3251.id8436.diff
Sat, Dec 21, 22:24
F3926842: D3251.id8350.diff
Sat, Dec 21, 22:24
Unknown Object (File)
Fri, Dec 20, 03:18
Unknown Object (File)
Fri, Dec 20, 03:10
Unknown Object (File)
Fri, Dec 20, 03:10
Unknown Object (File)
Fri, Dec 20, 01:40
Unknown Object (File)
Fri, Dec 20, 01:20
Unknown Object (File)
Fri, Dec 20, 01:20
Subscribers
None

Details

Summary

The aeris CryptCheck service rates 'E' the current Mozilla intermediate
configuration.

This change provide a more modern configuration supporting only TLS 1.3
for services requiring strong security while blocking legacy clients.

Ref T1228.

Test Plan

nginx -t

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
refresh-ciphers
Build Status
Buildable 5129
Build 5410: arc lint + arc unit