BBlack has submitted this change and it was merged. Change subject: update "strong" desc for accuracy ......................................................................
update "strong" desc for accuracy Change-Id: I846c826caef403bd8b4c681d57108ce9d343012b --- M modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb 1 file changed, 5 insertions(+), 2 deletions(-) Approvals: BBlack: Looks good to me, approved jenkins-bot: Verified diff --git a/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb b/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb index 93c96a1..d81dc78 100644 --- a/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb +++ b/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb @@ -16,8 +16,11 @@ # Current options are: # - strong: Only TLSv1.2 with AEAD ciphers. In practice this is a very # short list, and requires a very modern client. No tradeoff -# is made for compatibility. Definitely does not work with: -# IE<11, Android<4.4, Java<8, OpenSSL<1.0, Safari(OSX)<7 +# is made for compatibility. Only known to work with: +# Modern FF/Chrome, IE11, Java8, Android 4.4+, OpenSSL 1.0.x +# Definitely broken with: All Safari (OSX/iOS). +# IE11 support requires an ECDSA key as well, whereas others +# can work with RSA. # - mid: Supports TLSv1.0 and higher, and adds several forward-secret # options which are not AEAD. This is compatible with many # more clients than "strong", but still not compatible with: -- To view, visit https://gerrit.wikimedia.org/r/222851 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I846c826caef403bd8b4c681d57108ce9d343012b Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: BBlack <bbl...@wikimedia.org> Gerrit-Reviewer: BBlack <bbl...@wikimedia.org> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
