Update kong.yml to protect from POODLE ssl attack. #563
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
rafael
commented
Sep 24, 2015
rafael
commented
- I was doing some ssl tests and noticed that the nginx default configuration in kong.yml doesn't prevents from POODLE attack. This change adds a config change that protects from this.
* Be explicit about the ssl protocols that are supported to protect from POODLE attack.
|
Thank you. While making this a default might enforce good practises, I would have expected users to setup their Kong as they setup their nginx. The nginx config is exposed to be deeply customizable. |
thibaultcha
added a commit
that referenced
this pull request
Sep 29, 2015
Update kong.yml to protect from POODLE ssl attack.
thibaultcha
added a commit
that referenced
this pull request
Sep 29, 2015
xvaara
added a commit
to xvaara/kong
that referenced
this pull request
Oct 3, 2015
* Mashape/master: (23 commits) Update README.md Update README.md Closing Kong#562 Adding wait time before ratelimiting tests Fixing test fix(jwt) handle `iss` not being found in jwt credentials Update README.md docs(update) remove redundancy docs(update) fix layout fix(test) fix config test after Kong#563 Update README.md Adding missing statement for Kong#571 perf(analytics) global optimizations fix(plugins) make default config for plugins an empty object Closes Kong#445 dbocs(changelog) 0.5.0 changes Better content-type check in response-transformer plugin Closes Kong#535 Fixes the root problem at Kong#565 fix(key-auth) remove support for key in request body ...
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.