www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mark Thomas (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (INFRA-7587) Check SSL Status on Eris/harm
Date Wed, 16 Apr 2014 22:52:18 GMT

     [ https://issues.apache.org/jira/browse/INFRA-7587?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Mark Thomas resolved INFRA-7587.
--------------------------------

    Resolution: Fixed

Generally we were in pretty good shape already (nothing less than a B) and now everything
is at at least A-.

Improving beyond A- requires switching to httpd 2.4.x. That upgrade should be picked up in
the next round of OS updates (Ubuntu 14.04 LTS is due this month, apache 2.4 is already available
for FreeBSD)

> Check SSL Status on Eris/harm
> -----------------------------
>
>                 Key: INFRA-7587
>                 URL: https://issues.apache.org/jira/browse/INFRA-7587
>             Project: Infrastructure
>          Issue Type: Task
>          Components: HTTP Server, Subversion
>            Reporter: Ross Gardler
>            Assignee: Mark Thomas
>            Priority: Critical
>
> Is this comment on the heartbleed blog something we should take note of?
> You might want to strenghten your servers: https://www.ssllabs.com/ssltest/analyze.html?d=svn.apache.org
has a grade B. google has grade A: https://www.ssllabs.com/ssltest/analyze.html?d=google.de
> Posted by Tilman on April 12, 2014 at 01:17 PM UTC # 
> Ross Gardler (@rgardler)
> Senior Technology Evangelist
> Microsoft Open Technologies, Inc.
> A subsidiary of Microsoft Corporation



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message