{"push_id":697189248,"size":1,"distinct_size":1,"ref":"refs/heads/modern_crypto","head":"961a7f419aa92b40fb2fb9ce867031e6206f951f","before":"73ab9f26e0e194d1d07e0194983f82993165c8b4","commits":[{"sha":"961a7f419aa92b40fb2fb9ce867031e6206f951f","author":{"email":"326b5f08ac728e29a34fbed110ad409551f231b5@rojer.me","name":"rojer"},"message":"Disable outdated crypto, provide DH params for PFS\n\nTo be designated \"modern\" by Chrome, it needs to be able to negotiate:\n\n  * (EC)DHE key exchange (for PFS)\n  * AES or CHACHA cipher\n  * AEAD MAC\n\nEverything else is considered \"obsolete\".\n\nSource: IsSecureTLSCipherSuite in\nhttps://chromium.googlesource.com/chromium/src/+/master/net/ssl/ssl_cipher_suite_names.cc\n\nDH key exchange requires parameters (a long prime). These can be generated\nwith \"openssl dhparam 2048\" and should ideally be provided by the user,\nso we try to get them from the cert+key bundle file first, but fall back\non hard-coded ones if none are supplied.\n\nFixes #4","distinct":true,"url":"https://api.github.com/repos/cesanta/ssl_wrapper/commits/961a7f419aa92b40fb2fb9ce867031e6206f951f"}]}