You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Zhao Yongming (JIRA)" <ji...@apache.org> on 2011/04/02 11:24:06 UTC

[jira] [Created] (TS-730) SSL needs CipherSuite control in negotiation

SSL needs CipherSuite control in negotiation 
---------------------------------------------

                 Key: TS-730
                 URL: https://issues.apache.org/jira/browse/TS-730
             Project: Traffic Server
          Issue Type: Improvement
          Components: SSL
    Affects Versions: 2.1.7
         Environment: ATS trunk + SSL
            Reporter: Zhao Yongming


when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Igor Galić (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Igor Galić resolved TS-730.
---------------------------

       Resolution: Fixed
    Fix Version/s: 3.0.2

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>            Assignee: Igor Galić
>              Labels: gsoc2011, ssl
>             Fix For: 3.0.2, 3.1.0
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

[jira] [Updated] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Igor Galić (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Igor Galić updated TS-730:
--------------------------

    Summary: [gsoc2011] SSL needs CipherSuite control in negotiation   (was: SSL needs CipherSuite control in negotiation )

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>              Labels: ssl
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-730:
-----------------------------

    Backport to Version: 3.0.2

Marking for backport to 3.0.2, since it's in the 3.0.x branch STATUS file.

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>            Assignee: Igor Galić
>              Labels: gsoc2011, ssl
>             Fix For: 3.1.0
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

[jira] [Updated] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-730:
-----------------------------

    Fix Version/s: 3.1

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>              Labels: gsoc2011, ssl
>             Fix For: 3.1
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-730:
-----------------------------

    Fix Version/s:     (was: 3.1.1)
                   3.1.0

Since this is already committed on trunk, *and* suggested for backport, setting fix version to 3.1.0.

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>            Assignee: Igor Galić
>              Labels: gsoc2011, ssl
>             Fix For: 3.1.0
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

[jira] [Assigned] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Igor Galić (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Igor Galić reassigned TS-730:
-----------------------------

    Assignee: Igor Galić

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>            Assignee: Igor Galić
>              Labels: gsoc2011, ssl
>             Fix For: 3.1.1
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

[jira] [Updated] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Igor Galić (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Igor Galić updated TS-730:
--------------------------

    Backport to Version:   (was: 3.0.2)

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>            Assignee: Igor Galić
>              Labels: gsoc2011, ssl
>             Fix For: 3.1.0, 3.0.2
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

[jira] [Updated] (TS-730) [gsoc2011] SSL needs CipherSuite control in negotiation

Posted by "Conan Wang (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-730?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Conan Wang updated TS-730:
--------------------------

    Comment: was deleted

(was: A comment with security level 'jira-users' was removed.)

> [gsoc2011] SSL needs CipherSuite control in negotiation 
> --------------------------------------------------------
>
>                 Key: TS-730
>                 URL: https://issues.apache.org/jira/browse/TS-730
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 2.1.7
>         Environment: ATS trunk + SSL
>            Reporter: Zhao Yongming
>              Labels: gsoc2011, ssl
>             Fix For: 3.1.0
>
>
> when TS does negotiation, the CipherSuite is not configurable, for this time being, ciphers short than 128bits it not consider a good protect for secure connection. we should give CipherSuite more control. for example we can specify those preferred ciphers we want to use, as Apache httpd.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira