{"push_id":538510254,"size":4,"distinct_size":4,"ref":"refs/heads/prosody","head":"092fb0953794241f2ae0311b92b6bf82e70c1883","before":"3a5004d20cd1691addc8b713107022963a5677b0","commits":[{"sha":"cc7d51b132add3150cb6348a5fdca17fb0167b53","author":{"email":"c25dd0841d5fa94899de8e3e4e0aaeefb868a1ba@gmail.com","name":"Alan Orth"},"message":"roles/xmpp: Remove HIGH from Prosody TLS cipher suite\n\nHigh allows for non-forward-secret ciphers!\n\nSigned-off-by: Alan Orth <alan.orth@gmail.com>","distinct":true,"url":"https://api.github.com/repos/alanorth/ansible_blog/commits/cc7d51b132add3150cb6348a5fdca17fb0167b53"},{"sha":"fff122b35cfa08512f75ecc29be8d0e602a7a44f","author":{"email":"c25dd0841d5fa94899de8e3e4e0aaeefb868a1ba@gmail.com","name":"Alan Orth"},"message":"roles/xmpp: Explicitely disable SSLv3 ciphers in Prosody TLS cipher suite\n\nSigned-off-by: Alan Orth <alan.orth@gmail.com>","distinct":true,"url":"https://api.github.com/repos/alanorth/ansible_blog/commits/fff122b35cfa08512f75ecc29be8d0e602a7a44f"},{"sha":"7dbad067b4febca70b96cc3e8864e915a32cea56","author":{"email":"c25dd0841d5fa94899de8e3e4e0aaeefb868a1ba@gmail.com","name":"Alan Orth"},"message":"roles/xmpp: Use the hashed authentication backend for Prosody\n\nSee: http://prosody.im/doc/modules/mod_auth_internal_hashed\n\nHat tip to @oguya for reading the docs and noticing this.\n\nSigned-off-by: Alan Orth <alan.orth@gmail.com>","distinct":true,"url":"https://api.github.com/repos/alanorth/ansible_blog/commits/7dbad067b4febca70b96cc3e8864e915a32cea56"},{"sha":"092fb0953794241f2ae0311b92b6bf82e70c1883","author":{"email":"c25dd0841d5fa94899de8e3e4e0aaeefb868a1ba@gmail.com","name":"Alan Orth"},"message":"roles/xmpp: Update Prosody TLS cipher suite to be strict TLS 1.2 PFS ciphers\n\nShould give the following list of strong ciphers:\n\n$ openssl ciphers -V 'HIGH+kEDH:!PSK:!SRP:!3DES:!aNULL:!aDSS:!SSLv3:!TLSv1' | column -t\n0x00,0x9F  -  DHE-RSA-AES256-GCM-SHA384  TLSv1.2  Kx=DH  Au=RSA  Enc=AESGCM(256)  Mac=AEAD\n0x00,0x6B  -  DHE-RSA-AES256-SHA256      TLSv1.2  Kx=DH  Au=RSA  Enc=AES(256)     Mac=SHA256\n0x00,0x9E  -  DHE-RSA-AES128-GCM-SHA256  TLSv1.2  Kx=DH  Au=RSA  Enc=AESGCM(128)  Mac=AEAD\n0x00,0x67  -  DHE-RSA-AES128-SHA256      TLSv1.2  Kx=DH  Au=RSA  Enc=AES(128)     Mac=SHA256\n\nSigned-off-by: Alan Orth <alan.orth@gmail.com>","distinct":true,"url":"https://api.github.com/repos/alanorth/ansible_blog/commits/092fb0953794241f2ae0311b92b6bf82e70c1883"}]}