squid - Remove NT Domain auth (Bug #7017), allow some configuration for DH and cipher suites (Feature #6593), fix EDH and EECDH cipher suites (Bug #6592), some cosmetics #241
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 3 commits
December 22, 2016 22:08
This feature has been gone for quite a while, plus the GitHub repo link to master branch is no good in general.
Dead deprecated junk. This has been broken ever since 2.3 release without anyone noticing. Just use LDAP for AD authentication.
doktornotor
changed the title
added 7 commits
December 23, 2016 00:46
Dead deprecated junk. This has been broken ever since 2.3 release without anyone noticing. Just use LDAP for AD authentication.
Dead deprecated junk. This has been broken ever since 2.3 release without anyone noticing. Just use LDAP for AD authentication.
1. Added Modern and Intermediate options for cipher suites - settings per http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit#Modern_DH.2FEDH_ciphers_usage docs - modern disables TLS v1.0 as well (matching the behavior of reverse proxy) - intermediate enables the HIGH cipher suites for compatibility - add DH key size selection (defaults to 2048 for security) 2. Nuked some comments cruft remaining from bootstrap conversion while here.
…x EDH and EECDH cipher suites (Bug #6592) 1. Added Modern and Intermediate options for cipher suites - settings per http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit#Modern_DH.2FEDH_ciphers_usage docs - modern disables TLS v1.0 as well (matching the behavior of reverse proxy) - intermediate enables the HIGH cipher suites for compatibility - add DH key size selection (defaults to 2048 for security) 2. Fixed EDH and EECDH cipher suites usage (Bug #6592)
doktornotor
changed the title
rbgarga
approved these changes
Dec 26, 2016
Also redo the logic here to match the one used in squid.inc
|
Should be complete now, other fixes need to wait for next round. |
netgate-git-updates
pushed a commit
that referenced
this pull request
Dec 27, 2016
netgate-git-updates
pushed a commit
that referenced
this pull request
Jul 1, 2023
<ChangeLog> - [BREAKING] Update from clap 3 to clap 4. This forces the use of --exp/-e to require an = sign, which was not required before. This means that when you used to be able to write --exp +365d, you must now write --exp=+365d. This is only required for this flag. - Added --out argument to save output to a file #221 - Added support for EdDSA #238 - Added --date argument to change the display format of the timestamps #235 - Added --no-typ argument to prevent typ from being added to the header - Add Scoop installation info #241 - Add Macports installation info #231 Changes - Dependency updates - Remove Gofish installation info. See #228 - Update from jsonwebtoken 7 to 8 Fixes - Added better error handling for improper secret and algorithm combinations </ChangeLog>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Remove NT Domain authentication. Dead deprecated junk. This has been broken ever since 2.3 release (https://redmine.pfsense.org/issues/7017) without anyone noticing. Just use LDAP for AD authentication.
Added Modern and Intermediate options for cipher suites
Fixed EDH and EECDH cipher suites usage (Bug #6592)
Cosmetics