[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 --- Comment #9 from Pedro Amorim --- Nice work everyone! Pushed to 22.11.x for next release -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Pedro Amorim changed: What|Removed |Added Version(s)|23.11.00,23.05.03 |23.11.00,23.05.03,22.11.09 released in|| Status|Pushed to stable|Pushed to oldstable -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Fridolin Somers changed: What|Removed |Added Status|Pushed to master|Pushed to stable Version(s)|23.11.00|23.11.00,23.05.03 released in|| CC||fridolin.som...@biblibre.co ||m --- Comment #8 from Fridolin Somers --- Pushed to 23.05.x for 23.05.03 -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 --- Comment #7 from Tomás Cohen Arazi --- Pushed to master for 23.11. Nice work everyone, thanks! -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Tomás Cohen Arazi changed: What|Removed |Added Version(s)||23.11.00 released in|| Status|Passed QA |Pushed to master -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 --- Comment #6 from David Cook --- (In reply to Martin Renvoize from comment #5) > Confirmed this is the right thing to do.. all working as expected.. Going > straight for PQA here. Thanks, Martin! -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Martin Renvoize changed: What|Removed |Added QA Contact|testo...@bugs.koha-communit |martin.renvoize@ptfs-europe |y.org |.com -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Martin Renvoize changed: What|Removed |Added Status|Signed Off |Passed QA -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Martin Renvoize changed: What|Removed |Added Status|Needs Signoff |Signed Off CC||martin.renvoize@ptfs-europe ||.com --- Comment #5 from Martin Renvoize --- Confirmed this is the right thing to do.. all working as expected.. Going straight for PQA here. -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 Martin Renvoize changed: What|Removed |Added Attachment #152994|0 |1 is obsolete|| --- Comment #4 from Martin Renvoize --- Created attachment 154568 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=154568=edit Bug 34193: SSLProtocol enable in use versions and disable deprecated versions This patch changes the default SSLProtocol for the Let's Encrypt HTTPS template, so that it enables in use versions of TLS while disabling the deprecated versions of TLS. Signed-off-by: Martin Renvoize -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 --- Comment #3 from David Cook --- This one is tough to test without a public facing system that can use Let's Encrypt. But a visual inspection shows it's good. You can always check your production systems. You should be using something like "SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1" already if you're using Apache with HTTPS. -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 --- Comment #2 from David Cook --- Created attachment 152994 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=152994=edit Bug 34193: SSLProtocol enable in use versions and disable deprecated versions This patch changes the default SSLProtocol for the Let's Encrypt HTTPS template, so that it enables in use versions of TLS while disabling the deprecated versions of TLS. -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 David Cook changed: What|Removed |Added Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 --- Comment #1 from David Cook --- We want to go with the following: SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 This has the effect of enabling all the modern versions and then selectively disabling the deprecated versions. Despite what is stated on the Apache website, "all" stands for ''+SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2 +TLSv1.3'' -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193 David Cook changed: What|Removed |Added Assignee|koha-b...@lists.koha-commun |dc...@prosentient.com.au |ity.org | -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes. ___ Koha-bugs mailing list Koha-bugs@lists.koha-community.org https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
