5 ms·
I would like for someone with knowledge to create an example apache config and keep it up to date. One would think that someone from the apache project might b
by callesgg 13y ago
I would like for someone with knowledge to create an example apache config and keep it up to date.
One would think that someone from the apache project might be well suited for it.
- jvehent 13y agoYou mean this? https://wiki.mozilla.org/Security/Server_Side_TLS#Apache https://wiki.mozilla.org/Security/Server_Side_TLS#Apache
- jlgaddis 13y agoFor TLS? I can think of at least two sites that have been posted on HN recently that do just that.
- agildehaus 13y agohttps://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/ Makes it incredibly simple to get a good idea of how secure your config is and where compatibility problems might arise.
- conorgil145 13y agoI have been doing a lot of SSL/TLS research the last few days and found the following to be great resources from Qualys too: - https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy https://community.qualys.com/blogs/securitylabs/2013/08/05/c... - https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices_1.3.pdf https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Pr...
- deleted 13y ago[deleted]
- rjgray 13y agoThis repo is a collection of sensible SSL/TLS options for a variety of web servers, including Apache. https://github.com/ioerror/duraconf https://github.com/ioerror/duraconf