Module zotonic_ssl_option

SSL support functions, easily get safe options to initialize safe ssl sockets.

Copyright © 2020 Maas-Maarten Zeeman

Authors: Maas-Maarten Zeeman (mmzeeman@xs4all.nl).

Description

SSL support functions, easily get safe options to initialize safe ssl sockets

Function Index

ciphers/0Return the list of ciphers for http connections.
get_safe_tls_server_options/0Return safe ssl socket options.
remove_unavailable_cipher_suites/1Remove cipher suites which are not available by the underlying crypto library.
remove_unsafe_cipher_suites/1Remove the unsafe cipher suites from the provided list.
safe_eccs/0
safe_protocol_versions/0Return a list with safe tls versions provided by this erlang installation.
sort_cipher_suites/1Sort the cipher suite into a preferrable safe order.

Function Details

ciphers/0

ciphers() -> [string()]

Return the list of ciphers for http connections. This is a re-ordered list that comes from https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#23-use-secure-cipher-suites

get_safe_tls_server_options/0

get_safe_tls_server_options() -> any()

Return safe ssl socket options

remove_unavailable_cipher_suites/1

remove_unavailable_cipher_suites(Suites) -> any()

Remove cipher suites which are not available by the underlying crypto library.

remove_unsafe_cipher_suites/1

remove_unsafe_cipher_suites(Suites) -> any()

Remove the unsafe cipher suites from the provided list.

safe_eccs/0

safe_eccs() -> any()

safe_protocol_versions/0

safe_protocol_versions() -> [ssl:tls_version()]

Return a list with safe tls versions provided by this erlang installation.

sort_cipher_suites/1

sort_cipher_suites(Suites) -> any()

Sort the cipher suite into a preferrable safe order.


Generated by EDoc