Steve Hodgkiss
Steve Hodgkiss
@aeris - Have you looked any further into expanding the cypher's for TLSv1.3 ? Reason I am asking is because after implementing SSL configs under Apache and checking with SSL...
Ok thank you for your quick reply. Regarding checking the .json API I can't do that, as I have not integrated your code myself; it has been implemented by SEARXNG...
Thanks. I checked my particular URL and it returns: - {"dh":false,"pfs":false,"rsa":false,"tlsv1_0":false,"tlsv1_1":false},"great":{"hsts":true},"warning":{"dhe":true,"hsts":false,"sha1":true},"critical":{"dh":false,"des":false,"dss":false,"md5":false,"rc4":false,"rsa":false,"null":false,"sslv2":false,"sslv3":false,"export":false,"sweet32":false,"md2_sign":false,"md4_sign":false,"md5_sign":false,"sha_sign":false,"anonymous":false,"mdc2_sign":false,"sha1_sign":false}}
My Apache2 SSL config now has: SSLCipherSuite !DH:EECDH+AESGCM:EDH+AESGCM:AES256+EDH This has resulted in A+ grades at your site and also SSL Labs. Thanks for your help, appreciated.