Issue Type: Improvement Improvement
Assignee: Unassigned
Components: ssh
Created: 16/Jul/14 12:37 AM
Description:

Our IT dept uses automated scanning tools to discover vulnerabilities. Having the CBC ciphers enabled for the ssh connection to jenkins throws warnings in the tools.

I would like a configuration option to enable/disable particular ciphers, so that I could disable the cbc ciphers.

Our IT dept is able to do their job better when scans are clean and not throwing flags up at management.

This could be left as is, but allowing users the option to increase security at low implementation risk is almost always a good thing.

Project: Jenkins
Labels: ssh ciphers sshd vulnerability
Priority: Major Major
Reporter: Gavin Swanson
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to