Added bug report by @bong0 for OpenVPN 2.3.2
[ach-master.git] / TODO.md
diff --git a/TODO.md b/TODO.md
index b12a4f5..5e34d43 100644 (file)
--- a/TODO.md
+++ b/TODO.md
@@ -4,6 +4,14 @@ Reported by: @Wims80 http://twitter.com/wims80/status/425770704693239808
 Section Apache 2.1.1 recommends Rewrite instead of Redirect. Should be 301! (We correctly recommend 301 in the nginx section.)
 
 
 Section Apache 2.1.1 recommends Rewrite instead of Redirect. Should be 301! (We correctly recommend 301 in the nginx section.)
 
 
+2014-02-11 19:41
+OpenVPN cipher string doesn't work with 2.3.2 according to: @bong0.
+tlc-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-128-CBC-SHA:TLS-RSA-WITH-AES-128-CBC-SHA
+http://twitter.com/bong0/status/433306823001526272
+http://twitter.com/bong0/status/433307537375387648
+http://nopaste.info/d194fdaa78.html
+
+
 BIG TOPICS
 ==========
 
 BIG TOPICS
 ==========
 
@@ -44,6 +52,8 @@ Website
 People with outdated browsers (winXP) etc can't see our webpage. --> make a landing page explaining 
 how to updated the browser :)
 
 People with outdated browsers (winXP) etc can't see our webpage. --> make a landing page explaining 
 how to updated the browser :)
 
+Improve the wording on the cert.at Mailing list website so people don't get confused and know that they ended up on the correct site and list.
+
 
 Formatting
 ==========
 
 Formatting
 ==========
@@ -110,7 +120,7 @@ Contents
 * Webservers:
   Header Strict-Transport-Security "... includeSubDomains": we need to meed to mention that this can be a big pitfall.
   Also do some more research on this!
 * Webservers:
   Header Strict-Transport-Security "... includeSubDomains": we need to meed to mention that this can be a big pitfall.
   Also do some more research on this!
-  For example: http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec#section-6.1
+  For example: https://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec#section-6.1
   fix lighttpd HTTP redirection and env vars
   lighthttpd: ssl.ec-curve = "secp384"
     ssl.dh-file = "/etc/lighttpd/dhparams-group16.pem"
   fix lighttpd HTTP redirection and env vars
   lighthttpd: ssl.ec-curve = "secp384"
     ssl.dh-file = "/etc/lighttpd/dhparams-group16.pem"