Code Vault

xaizek / rocketgit (License: AGPLv3+) (since 2018-12-09)

Light and fast Git hosting solution suitable to serve both as a hub or as a personal code storage with its tickets, pull requests, API and much more.

Clone URLs: https://code.reversed.top/user/xaizek/rocketgit ssh://rocketgit@code.reversed.top/user/xaizek/rocketgit

Commit 00f1ad9bffc47d0cd786e6caa6f9777fae27b2ff

Improved TLS cyphers list for better security
Author: Catalin(ux) M. BOIE
Author date (UTC): 2016-12-30 12:47
Committer name: Catalin(ux) M. BOIE
Committer date (UTC): 2016-12-30 12:47
Parent(s): 3ac431ae8e880ceebc18507383771b23ce5d9b6a
Signing key:
Tree: 7c17e21f5eaa3358d38a92352078d82eaa2e4d56

File	Lines added	Lines deleted
samples/rg.conf	10	1

File samples/rg.conf changed (mode: 100644) (index fced6ce..d7a01ac)
98	98	LogLevel warn	LogLevel warn
99	99	SSLEngine on	SSLEngine on
100	100	SSLProtocol all -SSLv2 -SSLv3	SSLProtocol all -SSLv2 -SSLv3
	101		# Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended
	102		SSLHonorCipherOrder on
	103		SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
	104		# or, respect the system settings:
101	105	# Pay attention on next line! It fails on RedHat6!	# Pay attention on next line! It fails on RedHat6!
102		SSLCipherSuite PROFILE=SYSTEM
	106		#SSLCipherSuite PROFILE=SYSTEM
	107
	108		# https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning
	109		# To generate pin-sha256 string: openssl s_client -servername <server> -connect <server>:443 \| openssl x509 -pubkey -noout \| openssl rsa -pubin -outform der \| openssl dgst -sha256 -binary \| openssl enc -base64
	110		# Header always set Public-Key-Pins "pin-sha256=\"base64+primary==\"; pin-sha256=\"base64+backup==\"; max-age=5184000; includeSubDomains; report-uri=\"https://www.example.org/hpkp-report\""
	111		# Header always set Public-Key-Pins-Report-Only ... # to not block users!
103	112
104	113	SSLCertificateFile /etc/pki/tls/certs/localhost.crt	SSLCertificateFile /etc/pki/tls/certs/localhost.crt
105	114	SSLCertificateKeyFile /etc/pki/tls/private/localhost.key	SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

Hints

Before first commit, do not forget to setup your git environment:

git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):

git clone https://code.reversed.top/user/xaizek/rocketgit

Clone this repository using ssh (do not forget to upload a key first):

git clone ssh://rocketgit@code.reversed.top/user/xaizek/rocketgit

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a pull request:

... clone the repository ...
... make some changes and some commits ...
git push origin master