zotonic_ssl_option (zotonic_ssl v2.0.0)

View Source

SSL support functions, easily get safe options to initialize safe ssl sockets

Summary

Functions

Return the list of ciphers for http connections. This is a re-ordered list that comes from https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#23-use-secure-cipher-suites

Return safe ssl socket options

Remove cipher suites which are not available by the underlying crypto library.

Remove the unsafe cipher suites from the provided list.

Return a list with safe tls versions provided by this erlang installation.

Sort the cipher suite into a preferrable safe order.

Types

tls_version/0

-type tls_version() :: 'tlsv1.2' | 'tlsv1.3'.

Functions

ciphers()

-spec ciphers() -> [string()].

Return the list of ciphers for http connections. This is a re-ordered list that comes from https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#23-use-secure-cipher-suites

get_safe_tls_server_options()

Return safe ssl socket options

remove_unavailable_cipher_suites(Suites)

Remove cipher suites which are not available by the underlying crypto library.

remove_unsafe_cipher_suites(Suites)

Remove the unsafe cipher suites from the provided list.

safe_eccs()

safe_protocol_versions()

-spec safe_protocol_versions() -> [tls_version()].

Return a list with safe tls versions provided by this erlang installation.

sort_cipher_suites(Suites)

Sort the cipher suite into a preferrable safe order.