cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Gabriel Beims Bräscher (JIRA) <j...@apache.org>
Subject [jira] [Updated] (CLOUDSTACK-9977) Enhance SSL protocol used by Console Proxy
Date Thu, 13 Jul 2017 16:11:01 GMT

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-9977?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Gabriel Beims Bräscher updated CLOUDSTACK-9977:
-----------------------------------------------
    Description: 
Current SSL protocol and ciphers used in SystemVMs are not the recommended. To analyze it
is possible to use tests such as from SSL Labs (https://www.ssllabs.com/ssltest/).

The attached image 'SSLReportC' shows the SSL report of console proxy with grade capped to
C. With a few changes, it is possible to change it to the report from the attached image 'SSLReportA'
(A-).

  was:
Current SSL protocol and ciphers used in SystemVMs are not the recommended. To analyze it
is possible to use tests such as from SSL Labs (https://www.ssllabs.com/ssltest/).

The attached image 'SSLReportC' shows the SSL report of console proxy. With few changes, it
is possible to change it to the report from the attached image 'SSLReportA'.


> Enhance SSL protocol used by Console Proxy
> ------------------------------------------
>
>                 Key: CLOUDSTACK-9977
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9977
>             Project: CloudStack
>          Issue Type: Improvement
>      Security Level: Public(Anyone can view this level - this is the default.) 
>            Reporter: Gabriel Beims Bräscher
>            Assignee: Gabriel Beims Bräscher
>            Priority: Minor
>         Attachments: SSLReportA.png, SSLReportC.png
>
>
> Current SSL protocol and ciphers used in SystemVMs are not the recommended. To analyze
it is possible to use tests such as from SSL Labs (https://www.ssllabs.com/ssltest/).
> The attached image 'SSLReportC' shows the SSL report of console proxy with grade capped
to C. With a few changes, it is possible to change it to the report from the attached image
'SSLReportA' (A-).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message