From: Aaron Kaplan Date: Mon, 16 Dec 2013 20:48:49 +0000 (+0100) Subject: restructure into subsections - since we now use the report style X-Git-Url: https://git.bettercrypto.org/ach-master.git/commitdiff_plain/a87207872a38ec7e51d70fee2042d79539fe4339?ds=sidebyside restructure into subsections - since we now use the report style --- diff --git a/src/practical_settings.tex b/src/practical_settings.tex index 19f57c9..c187040 100644 --- a/src/practical_settings.tex +++ b/src/practical_settings.tex @@ -1,56 +1,56 @@ %\newpage -\section{Recommendations on practical settings} -\label{section:PracticalSettings} +%\section{Recommendations on practical settings} +\label{section:PracticalSettings} -\subsection{Webservers} -\input{"./practical_settings/webserver.tex"} +\section{Webservers} +\input{"./practical_settings/webserver_generated.tex"} %\newpage -\subsection{SSH} +\section{SSH} \input{"./practical_settings/ssh.tex"} %\newpage -\subsection{Mail Servers} +\section{Mail Servers} \input{"./practical_settings/mailserver.tex"} %\newpage -\subsection{VPNs} +\section{VPNs} \input{"./practical_settings/vpn.tex"} %\newpage -\subsection{PGP/GPG - Pretty Good Privacy} +\section{PGP/GPG - Pretty Good Privacy} \input{"./practical_settings/GPG.tex"} %\newpage -\subsection{seclayer-tcp} +\section{seclayer-tcp} \input{"./practical_settings/seclayer_tcp.tex"} %\newpage -\subsection{IPMI, ILO and other lights out management solutions} +\section{IPMI, ILO and other lights out management solutions} \input{"./practical_settings/ipmi.tex"} -%%\subsection{SIP} +%%\section{SIP} %%\todo{AK: ask Klaus. Write this section, Klaus??? } %\newpage -\subsection{Instant Messaging Systems} +\section{Instant Messaging Systems} \input{"./practical_settings/im.tex"} %\newpage -\subsection{Database Systems} +\section{Database Systems} \input{"./practical_settings/DBs.tex"} %\newpage -\subsection{Intercepting proxy solutions and reverse proxies} +\section{Intercepting proxy solutions and reverse proxies} \input{"./practical_settings/proxy_solutions.tex"} diff --git a/src/practical_settings/webserver.tex b/src/practical_settings/webserver.tex index 223795a..2c02d3b 100644 --- a/src/practical_settings/webserver.tex +++ b/src/practical_settings/webserver.tex @@ -1,11 +1,11 @@ %%\subsection{Webservers} -\subsubsection{Apache} +\subsection{Apache} -\begin{description} -\item[Tested with Version:] +\subsubsection{description} +\subsubsection[Tested with Version:] -\item[Settings:] \mbox{} +\subsubsection[Settings:] \mbox{} %-All +TLSv1.1 +TLSv1.2 \begin{lstlisting}[breaklines] @@ -25,7 +25,7 @@ Note again, that any cipher suite starting with ECDHE can be omitted, if in doubt. %% XXX NOTE TO SELF: remove from future automatically generated lists! -\item[Additional settings:] +\subsubsection[Additional settings:] You should redirect everything to httpS:// if possible. In Apache you can do this with the following setting inside of a VirtualHost environment: @@ -38,19 +38,18 @@ You should redirect everything to httpS:// if possible. In Apache you can do thi \end{lstlisting} -\item[Justification for special settings (if needed):] +\subsubsection[Justification for special settings (if needed):] -\item[References:] +\subsubsection[References:] -\item[How to test:] +\subsubsection[How to test:] See ssllabs in section \ref{section:Tools} -\end{description} -%XXXX ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS +%\end{description} -\subsubsection{lighttpd} +\subsection{lighttpd} @@ -106,7 +105,7 @@ lighttpd httpS:// redirection: \url{http://redmine.lighttpd.net/projects/1/wiki/ \end{description} -\subsubsection{nginx} +\subsection{nginx} \begin{description} \item[Tested with Version:] 1.4.4 with OpenSSL 1.0.1e on OS X Server 10.8.5 @@ -165,7 +164,7 @@ You should redirect everything to httpS:// if possible. In Nginx you can do this -\subsubsection{MS IIS} +\subsection{MS IIS} \label{sec:ms-iis}