Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Updated SSL/TLS defaults #1143

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Updated SSL/TLS defaults #1143

wants to merge 5 commits into from

Commits on Apr 11, 2023

  1. Update SSL defaults according to Mozilla recommendation

    @moogle19
    moogle19 committed Apr 11, 2023
    Configuration menu
    Copy the full SHA
    3f7f471 View commit details
    Browse the repository at this point in the history

  2. Bump elixir version since OTP22 needed for tls1.3

    @moogle19
    moogle19 committed Apr 11, 2023
    Configuration menu
    Copy the full SHA
    5788c5c View commit details
    Browse the repository at this point in the history

  3. Bump Elixir and OTP versions in CI

    @moogle19
    moogle19 committed Apr 11, 2023
    Configuration menu
    Copy the full SHA
    b271c35 View commit details
    Browse the repository at this point in the history

  4. Move set_secure_defaults/1 after configure_managed_tls/1 

    TLS1.3 doesn't support secure_renegotitate or reuse_sessions
which is set to true by default.
By moving the set_secure_defaults after the configuration,
the correct options are set
    @moogle19
    moogle19 committed Apr 11, 2023
    Configuration menu
    Copy the full SHA
    7bf4aa2 View commit details
    Browse the repository at this point in the history

  5. Update lib/plug/ssl.ex 

    Co-authored-by: Bram Verburg <[email protected]>
    @moogle19 @voltone
    moogle19 and voltone authored Apr 11, 2023
    Configuration menu
    Copy the full SHA
    f48e6d3 View commit details
    Browse the repository at this point in the history