{"action":"created","issue":{"url":"https://api.github.com/repos/turnkeylinux/common/issues/42","labels_url":"https://api.github.com/repos/turnkeylinux/common/issues/42/labels{/name}","comments_url":"https://api.github.com/repos/turnkeylinux/common/issues/42/comments","events_url":"https://api.github.com/repos/turnkeylinux/common/issues/42/events","html_url":"https://github.com/turnkeylinux/common/pull/42","id":98899278,"number":42,"title":"Security hardening","user":{"login":"Dude4Linux","id":1219334,"avatar_url":"https://avatars.githubusercontent.com/u/1219334?v=3","gravatar_id":"","url":"https://api.github.com/users/Dude4Linux","html_url":"https://github.com/Dude4Linux","followers_url":"https://api.github.com/users/Dude4Linux/followers","following_url":"https://api.github.com/users/Dude4Linux/following{/other_user}","gists_url":"https://api.github.com/users/Dude4Linux/gists{/gist_id}","starred_url":"https://api.github.com/users/Dude4Linux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Dude4Linux/subscriptions","organizations_url":"https://api.github.com/users/Dude4Linux/orgs","repos_url":"https://api.github.com/users/Dude4Linux/repos","events_url":"https://api.github.com/users/Dude4Linux/events{/privacy}","received_events_url":"https://api.github.com/users/Dude4Linux/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":33,"created_at":"2015-08-04T06:27:51Z","updated_at":"2015-08-21T11:43:34Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/turnkeylinux/common/pulls/42","html_url":"https://github.com/turnkeylinux/common/pull/42","diff_url":"https://github.com/turnkeylinux/common/pull/42.diff","patch_url":"https://github.com/turnkeylinux/common/pull/42.patch"},"body":"References:\r\n[Guide to Deploying Diffie-Hellman for TLS](https://weakdh.org/sysadmin.html)\r\n[Configuring Apache, Nginx, and OpenSSL for Forward Secrecy](https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy)\r\n[Strong SSL Security on Apache2](https://raymii.org/s/tutorials/Strong_SSL_Security_On_Apache2.html)\r\n[Logjam: the latest TLS vulnerability explained](https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/)\r\n[BREACH mitigation](https://community.qualys.com/message/20404#20404)\r\n[Configuring Apache for Perfect Forward Secrecy](http://www.lorrin.org/blog/2013/07/03/configuring-apache-for-perfect-forward-secrecy/)\r\n[Eveho Blog - SSL/TLS, ciphers, perfect forward secrecy and Tomcat](https://blog.eveoh.nl/2014/02/tls-ssl-ciphers-pfs-tomcat/)\r\nTesting:\r\n[testssl.sh](https://github.com/drwetter/testssl.sh) - use git clone to install on your scanning host\r\nnmap - $ sudo nmap -p 10000-20000 -sSV -T4 <hostname>\r\n[OpenVAS](http://www.openvas.org/) - available on [Kali Linux](https://www.kali.org/)"},"comment":{"url":"https://api.github.com/repos/turnkeylinux/common/issues/comments/133384395","html_url":"https://github.com/turnkeylinux/common/pull/42#issuecomment-133384395","issue_url":"https://api.github.com/repos/turnkeylinux/common/issues/42","id":133384395,"user":{"login":"DocCyblade","id":9731860,"avatar_url":"https://avatars.githubusercontent.com/u/9731860?v=3","gravatar_id":"","url":"https://api.github.com/users/DocCyblade","html_url":"https://github.com/DocCyblade","followers_url":"https://api.github.com/users/DocCyblade/followers","following_url":"https://api.github.com/users/DocCyblade/following{/other_user}","gists_url":"https://api.github.com/users/DocCyblade/gists{/gist_id}","starred_url":"https://api.github.com/users/DocCyblade/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DocCyblade/subscriptions","organizations_url":"https://api.github.com/users/DocCyblade/orgs","repos_url":"https://api.github.com/users/DocCyblade/repos","events_url":"https://api.github.com/users/DocCyblade/events{/privacy}","received_events_url":"https://api.github.com/users/DocCyblade/received_events","type":"User","site_admin":false},"created_at":"2015-08-21T11:43:34Z","updated_at":"2015-08-21T11:43:34Z","body":"@JedMeister - You are too smart!  You were correct. I knew it must have been me since anything with mysql was failing to build. I ended up rebooting and running my \"clean_up\" script. (It resets TKLDev to factory out of the box) I'll post it or add it to the TKLDev tool chain when I work out the bugs. That worked too\r\n\r\nOnce I finish the testing, I'll take a look at the other two bug issues today"}}