github.com/mozilla/ssl-config-generator issues

Stop recommending DHE, because of "dheater" vulnerability

patrakov opened this issue about 3 years ago

Move GitHub Pages build and deploy function into GitHub Actions

gene1wood opened this issue over 3 years ago

lighttpd update version

gstrauss opened this pull request over 3 years ago

Add support for OpenSSL 3.0.0

BillGoldstein opened this issue over 3 years ago

Postfix 3.5.6 (intermediate): SSL_accept error (no shared cipher) with Amazon SES

sebastianlipponer opened this issue over 3 years ago

Jetty TLS 1.3 CipherSuites

jonah-iden opened this issue over 3 years ago

HA-Proxy no-sslv3/no-tlsv1x are ignored

sachaz opened this issue over 3 years ago

Apache rewrite config - double-encoding query strings

jesusbagpuss opened this issue over 3 years ago

Why do you recommend adding the root CA for nginx under ssl_trusted_certificate? (OCSP stapling)

matrey opened this issue over 3 years ago

Add support for Kestrel/ASP.NET Core

ArthurHNL opened this issue over 3 years ago

Move nginx ssl_protocols directive outside of server context into new parent http context

gene1wood opened this issue over 3 years ago

ERR_SSL_PROTOCOL_ERROR

lifeofguenter opened this issue over 3 years ago

lighttpd: 308 permanent redirect

gstrauss opened this pull request almost 4 years ago

Change supportsOcspStapling from boolean to version based

gene1wood opened this issue almost 4 years ago

For Apache, prefer 308 Permanent Redirect to 301 Moved Permanently

mavit opened this pull request almost 4 years ago

apache: Allow use of SSLOpenSSLConfCmd DHParameters if supported

tim-seoss opened this issue almost 4 years ago

Explicitly set list of allowed TLSv1.3 ciphersuites for nginx Modern/Intermediate/Old configurations

makhomed opened this issue almost 4 years ago

308 Permanent Redirect

mavit opened this issue over 4 years ago

Postfix config misses smtp_* parameters and includes several default settings

gsauthof opened this issue over 4 years ago

Use rigid safe elliptic curves

atombrella opened this issue over 4 years ago

Traefik generation for Intermediate does not support IE11 on Windows 7

Kiina opened this issue over 4 years ago

Update Go generator

FiloSottile opened this pull request over 4 years ago

Invalid value for ProFTPD 1.3.6 "TLSStaplingCache" directive

eomanis opened this issue over 4 years ago

Invalid value for ProFTPD 1.3.6 "TLSProtocol" directive

eomanis opened this issue over 4 years ago

Typo at ProFTPD directive "TLSessionTickets"

eomanis opened this issue over 4 years ago

Tag Releases

nemchik opened this issue over 4 years ago

RFE: recommend server preference for cipher choice

gstrauss opened this issue over 4 years ago

Would it better to wrap "return 301" inside a `location` block of nginx conf?

runapp opened this issue over 4 years ago

chore: Remove obsolete postfix parameter `smtpd_use_tls`

polarathene opened this pull request over 4 years ago

Tomcat needs comma in `protocols`

april opened this issue almost 5 years ago

Add support for Jetty

ghost opened this issue almost 5 years ago

The quotes are important :)

IAmATeaPot418 opened this pull request almost 5 years ago

simplify lighttpd config

gstrauss opened this pull request almost 5 years ago

Bump acorn from 6.4.0 to 6.4.1

dependabot[bot] opened this pull request almost 5 years ago

Updating PostgreSQL template for version 12

crispygoth opened this pull request almost 5 years ago

Adding Redis 6.0 Support

IAmATeaPot418 opened this pull request almost 5 years ago

Include Redis open-source in configuration generator

IAmATeaPot418 opened this issue almost 5 years ago

Intermediate Config generation for dovecot 2.0.9

langemar opened this issue almost 5 years ago

awselb 2014.2.19, intermediate config supports weak DH parameters

sonicdoe opened this issue almost 5 years ago

haproxy 1.8.23 and OpenSSL 1.1.1 Modern Config Not supported

hockey6611 opened this issue almost 5 years ago

Fix link to AWS ALB security policies

sonicdoe opened this pull request almost 5 years ago

Update Intermediate security policy for AWS ALB

sonicdoe opened this pull request almost 5 years ago

NGINX 1.17.7 intermediate config feedback

Dave-09 opened this issue almost 5 years ago

Intermediate Profile for haproxy does not support Safari 10.1.2 on OSX 10.10.5

markusweb opened this issue almost 5 years ago

Document best way for users to get notifications about new guideline versions

gene1wood opened this issue almost 5 years ago

Add recommendation version to commented URL

gene1wood opened this issue almost 5 years ago

Set ECDH curves in Nginx and Apache configuration

fabian-hk opened this issue almost 5 years ago

Build version isn't automatically updating the date

april opened this issue almost 5 years ago

Inconsistent server ssl-config.mozilla.org configuration

makhomed opened this issue almost 5 years ago

huge feature request: browser compatibility matrix

chipitsine opened this issue almost 5 years ago

Support for Traefik v2

simonkrenger opened this pull request about 5 years ago

Bump mixin-deep from 1.3.1 to 1.3.2

dependabot[bot] opened this pull request about 5 years ago

Postgresql below 10 (9.6, 9.5, etc) do not support ssl_dh_params_file

saepurusass opened this issue about 5 years ago

Nginx ssl_session_tickets with modern on v5

bungle opened this issue about 5 years ago

Support GitHub Releases

siccovansas opened this issue about 5 years ago

D6C41E91286C4D458AE15A24BA312AF1

aungyehan opened this issue about 5 years ago

Traefik 2.0 Syntax

neclimdul opened this issue about 5 years ago

Dovecot all but Old have `ssl_prefer_server_ciphers = no`

j-be opened this issue about 5 years ago

Modern + TLS 1.2

skyzyx opened this issue about 5 years ago

Intermediate profile produces broken config for old versions of Apache/OpenSSL

mavit opened this issue about 5 years ago

Use SSLOpenSSLConfCmd to specify DHParameters in Apache 2.4?

tomsommer opened this issue over 5 years ago

Advise dynamic dh parameters instead of downloading from mozilla

italovalcy opened this issue over 5 years ago

Dovecot 2.2.27: Unknown setting ssl_dh

xrat opened this issue over 5 years ago

Dovecot 2.2.27: Unknown setting ssl_min_protocol

xrat opened this issue over 5 years ago

Reusability improvements

JGoutin opened this issue over 5 years ago

comment incorrectly says mod_socache_shmcb required

yeahforbes opened this issue over 5 years ago

HAProxy 1.5.19 fails to start due to ssl-dh-param-file

cherouvim opened this issue over 5 years ago

Add support for IIS?

spitzerr opened this issue over 5 years ago

Cipher suites for TLSv1.3?

mrphs opened this issue over 5 years ago

Intermediate config for Traefik contains invalid ciphersuites

EwoutSchrotenboer opened this issue over 5 years ago

Intermediate config does not support IE 11 on Windows 7

amq opened this issue over 5 years ago

Add 'preload' to HSTS header?

mrphs opened this issue over 5 years ago

Apache redirect should not use mod_rewrite

ghost opened this issue over 5 years ago

Cipher sort order

mjaix opened this issue over 5 years ago

HAProxy config uses ciphers string as ciphersuites

DrewBloechl opened this issue over 5 years ago

Surface version of config generator on page

gene1wood opened this issue over 5 years ago

haproxy config is not updating

publicarray opened this issue over 5 years ago

lighttpd: does not support more than one curve?

LeSpocky opened this issue over 5 years ago

lighttpd: ssl-conf-cmd fails with openssl 1.1.1c

LeSpocky opened this issue over 5 years ago

Stray curly brace in HAProxy config

DrewBloechl opened this issue over 5 years ago

fix postfix template - ciphers vs ciphersuites

scintill opened this pull request over 5 years ago

haproxy config causes haproxy 2.x to hang in http/2 mode with unverified curl

sandys opened this issue over 5 years ago

use correct array in MySQL template

Manawyrm opened this pull request over 5 years ago

Add support for dovecot

Manawyrm opened this pull request over 5 years ago

Nginx redirect - duplicated query parameters

lynt-smitka opened this issue over 5 years ago

Add support for IIS on Windows 1809

lennybacon opened this pull request over 5 years ago

Configuration direct download

JGoutin opened this issue over 5 years ago

wrong option for nginx modern and intermediate

MagicChocoRolls opened this issue over 5 years ago

Add support for dovecot?

D4N opened this issue over 5 years ago

Add support for AWS ALB

gene1wood opened this pull request over 5 years ago

Convert AWS ELB CloudFormation template from JSON to YAML

gene1wood opened this pull request over 5 years ago

Fix duplicate protocol for caddy/modern

angristan opened this pull request over 5 years ago

Envoy Proxy Configuration Support

xstevens opened this issue over 5 years ago

Tomcat configuration support

jozefizso opened this issue over 5 years ago

"Supports …" is weird with non-web servers

SISheogorath opened this issue over 5 years ago

Change AWS CloudFormation to YAML

gene1wood opened this issue over 5 years ago

Add AWS ALB HTTP to HTTPS redirect

gene1wood opened this issue over 5 years ago

Disable TLS session tickets in Apache

bmw opened this issue over 5 years ago

Add more documentation on form.* and output.*

april opened this issue over 5 years ago

Support "ffdhe1024" for Old

april opened this issue over 5 years ago

Ecosyste.ms: OpenCollective

github.com/mozilla/ssl-config-generator