mirror of
https://github.com/certbot/certbot.git
synced 2026-04-07 01:55:34 -04:00
b1a8e7175b
Part of #7204. Makes the smaller changes described at https://github.com/certbot/certbot/issues/7204#issuecomment-571838185 to disable many old ciphersuites and TLS versions < 1.2. Does not add checks for OpenSSL version or modify session tickets. Since Apache uses TLS protocol blacklisting instead of whitelisting (as in NGINX), we additionally may not need to determine if the server supports TLS1.3 and turn it on or off based on Apache version. * Update SSL versions and ciphersuites based on Mozilla intermediate recommendations for apache * Update constants with hashes of new config files * Update changelog |
||
|---|---|---|
| .. | ||
| augeas_lens | ||
| __init__.py | ||
| apache_util.py | ||
| centos-options-ssl-apache.conf | ||
| configurator.py | ||
| constants.py | ||
| display_ops.py | ||
| entrypoint.py | ||
| http_01.py | ||
| obj.py | ||
| options-ssl-apache.conf | ||
| override_arch.py | ||
| override_centos.py | ||
| override_darwin.py | ||
| override_debian.py | ||
| override_fedora.py | ||
| override_gentoo.py | ||
| override_suse.py | ||
| parser.py | ||