class Prof::SSL::CipherSet
Constants
- PIVOTAL_MODERN
This list is based on the Mozilla Modern cipher list https://wiki.mozilla.org/Security/Server_Side_TLS 2015-02-05 we have removed some of the supported ciphers due to the version of openssl used on the stemcel: 'ECDHE-ECDSA-AES128-GCM-SHA256'
'ECDHE-ECDSA-AES256-GCM-SHA384' 'DHE-DSS-AES128-GCM-SHA256' 'kEDH+AESGCM' 'ECDHE-ECDSA-AES128-SHA256' 'ECDHE-ECDSA-AES128-SHA' 'ECDHE-ECDSA-AES256-SHA384' 'ECDHE-ECDSA-AES256-SHA' 'DHE-DSS-AES128-SHA256' 'DHE-DSS-AES256-SHA'
It appears the nginx will enable DHE-RSA-AES256-GCM-SHA384 when ECDHE-RSA-AES256-GCM-SHA384 is specified We believe DHE-RSA-AES256-GCM-SHA384 to be strong, but it is not part of the official mozilla modern lists. This has been added to the list of our supported ciphers
Attributes
supported_ciphers[R]
supported_protocols[R]
Public Class Methods
new(supported_ciphers: [], supported_protocols: [])
click to toggle source
# File lib/prof/ssl/cipher_set.rb, line 14 def initialize(supported_ciphers: [], supported_protocols: []) @supported_ciphers = supported_ciphers @supported_protocols = supported_protocols end