nmcontrol
nmcontrol copied to clipboard
REST TLS code uses bad TLS settings
As discussed in https://github.com/namecoin/nmcontrol/pull/49 , the REST TLS code (not yet merged, but probably will be merged soon) supports old SSL/TLS versions and weak and non-forward-secret ciphersuites. I have some untested code that should mostly fix this (and also includes a test script using SSLLabs):
https://github.com/JeremyRand/nmcontrol/commit/7226650438a1470aea583e48656f64972867c4c6
However, it needs Python 2.7.9 or Python 3.4. So, we should revisit this once we support Python 3, or once 2.7.9 is supported in more systems (Fedora 21 is using 2.7.8 as of this writing). In the meantime, we should make it absolutely clear to end users that they should NOT be using HTTPS with REST.