ach-master.git
5 years agoMerge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening
Aaron Kaplan [Fri, 9 May 2014 09:38:50 +0000 (11:38 +0200)]
Merge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening

5 years agoUpdate of the draft presentation for M3AWWG3
David Durvaux [Wed, 7 May 2014 09:00:15 +0000 (11:00 +0200)]
Update of the draft presentation for M3AWWG3

5 years agoAdding M3AWWG presentation (DRAFTgit status)
David Durvaux [Tue, 6 May 2014 06:15:30 +0000 (08:15 +0200)]
Adding M3AWWG presentation (DRAFTgit status)

5 years agomweights issue on OS X and fix documented in README
Aaron Zauner [Fri, 2 May 2014 13:06:01 +0000 (15:06 +0200)]
mweights issue on OS X and fix documented in README

5 years agoMerge pull request #58 from shotty1/patch-1
Aaron Zauner [Sun, 13 Apr 2014 13:33:07 +0000 (15:33 +0200)]
Merge pull request #58 from shotty1/patch-1

Corrected Syntax on STS

5 years agoCorrected Syntax on STS
shotty1 [Sat, 12 Apr 2014 17:16:34 +0000 (19:16 +0200)]
Corrected Syntax on STS

Syntax was missing "" for STS including subdomains.
Tested with Apache 2.2.22 against OpenSSL 1.0.1e, Debian Wheezy

5 years agoMerge pull request #57 from mirbach/master
Aaron Zauner [Sat, 12 Apr 2014 16:31:08 +0000 (18:31 +0200)]
Merge pull request #57 from mirbach/master

MS IIS Config & Test

5 years agoIIS Config & Test
Andreas Mirbach [Fri, 11 Apr 2014 13:06:17 +0000 (15:06 +0200)]
IIS Config & Test

I tested Cipher String B agains all supported versions of Windows and
related Internet Explorer Versions. Its gone work. Yeay

5 years agoSilly me. Adapt Makefile for index
Tobias Pape [Sun, 6 Apr 2014 22:18:44 +0000 (00:18 +0200)]
Silly me. Adapt Makefile for index

5 years agoAdd local glossaries package to avoid errors
Tobias Pape [Sun, 6 Apr 2014 20:40:58 +0000 (22:40 +0200)]
Add local glossaries package to avoid errors

5 years agotypo in md
Tobias Pape [Fri, 17 Jan 2014 15:46:37 +0000 (16:46 +0100)]
typo in md

5 years agoA short helper on how to use _acronyms_, _glossary entries_, and the _index_.
Tobias Pape [Fri, 17 Jan 2014 14:22:11 +0000 (15:22 +0100)]
A short helper on how to use _acronyms_, _glossary entries_, and the _index_.

5 years agoExample usage
Tobias Pape [Fri, 17 Jan 2014 10:30:09 +0000 (11:30 +0100)]
Example usage

5 years agoEnable glossaries for a Glossary, Acronyms, and Index
Tobias Pape [Fri, 17 Jan 2014 10:27:20 +0000 (11:27 +0100)]
Enable glossaries for a Glossary, Acronyms, and Index

5 years agoMerge https://github.com/BetterCrypto/Applied-Crypto-Hardening
Aaron Zauner [Sat, 5 Apr 2014 18:17:05 +0000 (20:17 +0200)]
Merge https://github.com/BetterCrypto/Applied-Crypto-Hardening

Conflicts:
src/practical_settings/ssh.tex

5 years agoMerge pull request #55 from krono/configfiles-and-latex
Aaron Zauner [Sat, 5 Apr 2014 17:59:21 +0000 (19:59 +0200)]
Merge pull request #55 from krono/configfiles-and-latex

Configfiles and latex

5 years agoMerge https://github.com/BetterCrypto/Applied-Crypto-Hardening
Aaron Zauner [Sat, 5 Apr 2014 17:31:15 +0000 (19:31 +0200)]
Merge https://github.com/BetterCrypto/Applied-Crypto-Hardening

5 years agoMerge pull request #52 from bong0/master
Aaron Zauner [Sat, 5 Apr 2014 17:31:08 +0000 (19:31 +0200)]
Merge pull request #52 from bong0/master

I hopefully clarified what my report cipher name deprecation is about

5 years agoexlude IDEA cipher
Aaron Zauner [Sat, 5 Apr 2014 17:16:05 +0000 (19:16 +0200)]
exlude IDEA cipher

IDEA is known for weak keys. it is a valid fallback option on openssl =< 0.9.7

5 years agoadd sshd -t hint to ssh section
cm [Fri, 4 Apr 2014 15:52:00 +0000 (17:52 +0200)]
add sshd -t hint to ssh section

5 years agoAdded talk at DFN-Betriebstagung 2014.
Tobias Dussa [Mon, 31 Mar 2014 14:20:59 +0000 (16:20 +0200)]
Added talk at DFN-Betriebstagung 2014.

5 years agoActually strip an image
Tobias Pape [Tue, 25 Mar 2014 16:54:55 +0000 (17:54 +0100)]
Actually strip an image

5 years agoSimplify an image
Tobias Pape [Tue, 25 Mar 2014 16:46:23 +0000 (17:46 +0100)]
Simplify an image

5 years agoSplit configfiles out of TeX document.
Tobias Pape [Tue, 25 Mar 2014 02:59:49 +0000 (03:59 +0100)]
Split configfiles out of TeX document.

This gives us the possibilty to give complete, downloadable
examles; All config files are linked to a modifieable URL,
the default being https://bettercrypto.org/static/configuration/...

Next step: replace ciphersuite automatically in those config files?

Most configfiles are based on their Debian Wheezy, sometime Jessie,
defaults.

5 years agoNicer tables
Tobias Pape [Tue, 25 Mar 2014 02:51:04 +0000 (03:51 +0100)]
Nicer tables

5 years agoUse OpenSans and SourceCode Pro from our own texmf
Tobias Pape [Tue, 25 Mar 2014 02:46:58 +0000 (03:46 +0100)]
Use OpenSans and SourceCode Pro from our own texmf

We pick it up automatically in the Makefile

5 years agoMake it easier to select draft/final
Tobias Pape [Tue, 25 Mar 2014 02:24:36 +0000 (03:24 +0100)]
Make it easier to select draft/final

5 years agoSubsection disappeared. Bugfix
Ulrich [Mon, 24 Mar 2014 11:43:28 +0000 (12:43 +0100)]
Subsection disappeared. Bugfix

5 years agoMerge pull request #54 from nagua/OpenSSH-Curve25519
Aaron Zauner [Sun, 23 Mar 2014 23:56:42 +0000 (00:56 +0100)]
Merge pull request #54 from nagua/OpenSSH-Curve25519

OpenSSH 6.6p1 Ciphers, MAC, Kex changes

5 years agoAdded myself to Acknowledgements
Nicolas Riebesel [Sun, 23 Mar 2014 22:58:30 +0000 (23:58 +0100)]
Added myself to Acknowledgements

5 years agoOpenSSH 6.6p1 Ciphers, MAC, Kex changes
Nicolas Riebesel [Sun, 23 Mar 2014 22:46:28 +0000 (23:46 +0100)]
OpenSSH 6.6p1 Ciphers, MAC, Kex changes

* New tested configuration for OpenSSH 6.6p1
* Added curve25519-sha256@libssh.org to KexAlgorithms (6.6p1)
* Added chacha20-poly1305@openssh.com to Ciphers (6.6p1)
* Added umac-128-etm@openssh.com and hmac-ripemd160 to MAC (6.6p1)

5 years agoMerge branch 'master' of https://git.bettercrypto.org/ach-master
Aaron Kaplan [Mon, 3 Mar 2014 19:20:21 +0000 (19:20 +0000)]
Merge branch 'master' of https://git.bettercrypto.org/ach-master

5 years agomake a note on RSA
Aaron Kaplan [Mon, 3 Mar 2014 19:20:04 +0000 (19:20 +0000)]
make a note on RSA

5 years agoSuggestion: Add SSL/TLS versions supported by MS IIS
Pepi Zawodsky [Thu, 27 Feb 2014 21:59:44 +0000 (22:59 +0100)]
Suggestion: Add SSL/TLS versions supported by MS IIS

5 years agoremoved Opera 17 from the list of supported browsers for Cipher A (thanks interfaSys...
Adi Kriegisch [Tue, 25 Feb 2014 08:49:49 +0000 (09:49 +0100)]
removed Opera 17 from the list of supported browsers for Cipher A (thanks interfaSys Sàrl for testing)

5 years agofixed CipherA compatibility (thanks interfaSys Sàrl) and added a reference to choosin...
Adi Kriegisch [Mon, 24 Feb 2014 17:28:44 +0000 (18:28 +0100)]
fixed CipherA compatibility (thanks interfaSys Sàrl) and added a reference to choosing ones own cipher suite

5 years agoadd Alexander Würstlein to authors, we'll need references to affiliation with supersc...
Aaron Zauner [Sun, 23 Feb 2014 19:44:31 +0000 (20:44 +0100)]
add Alexander Würstlein to authors, we'll need references to affiliation with superscript or similar soon

5 years agocreated a new old clients subsection for web servers and moved config hints in there
Adi Kriegisch [Mon, 17 Feb 2014 23:08:17 +0000 (00:08 +0100)]
created a new old clients subsection for web servers and moved config hints in there

5 years agomerging kerberos pull req. by @arwarw via github
Aaron Zauner [Fri, 14 Feb 2014 17:19:38 +0000 (18:19 +0100)]
merging kerberos pull req. by @arwarw via github

5 years agolistlisting is wrong
Alexander Wuerstlein [Fri, 14 Feb 2014 16:33:54 +0000 (17:33 +0100)]
listlisting is wrong

5 years agotypo: one more comma and an unescaped #
Alexander Wuerstlein [Fri, 14 Feb 2014 16:18:49 +0000 (17:18 +0100)]
typo: one more comma and an unescaped #

5 years agotypo: missing commata
Alexander Wuerstlein [Fri, 14 Feb 2014 15:44:01 +0000 (16:44 +0100)]
typo: missing commata

5 years agotypo: missing string name in security.bib
Alexander Wuerstlein [Fri, 14 Feb 2014 15:42:04 +0000 (16:42 +0100)]
typo: missing string name in security.bib

5 years agoMerge branch 'master' of https://git.bettercrypto.org/ach-master
Aaron Kaplan [Fri, 14 Feb 2014 13:45:59 +0000 (14:45 +0100)]
Merge branch 'master' of https://git.bettercrypto.org/ach-master

5 years agoadd presentations from the TF-CSIRT TERENA meeting
Aaron Kaplan [Fri, 14 Feb 2014 13:45:05 +0000 (14:45 +0100)]
add presentations from the TF-CSIRT TERENA meeting

5 years agoBibtex all urls included in comments
Alexander Wuerstlein [Thu, 13 Feb 2014 23:46:26 +0000 (00:46 +0100)]
Bibtex all urls included in comments

5 years agopostfix master.cf: remove spaces
cm [Wed, 12 Feb 2014 19:31:57 +0000 (20:31 +0100)]
postfix master.cf: remove spaces

5 years agoAdded StartTLS.info website for mail servers.
Pepi Zawodsky [Wed, 12 Feb 2014 18:25:17 +0000 (19:25 +0100)]
Added StartTLS.info website for mail servers.

5 years agoMerge branch 'master' of https://git.bettercrypto.org/ach-master
Aaron Kaplan [Wed, 12 Feb 2014 10:49:55 +0000 (11:49 +0100)]
Merge branch 'master' of https://git.bettercrypto.org/ach-master

5 years agoadd some notes
Aaron Kaplan [Wed, 12 Feb 2014 10:49:45 +0000 (11:49 +0100)]
add some notes

5 years agoMerge pull request #53 from hansenerd/master
Aaron Zauner [Wed, 12 Feb 2014 08:26:03 +0000 (09:26 +0100)]
Merge pull request #53 from hansenerd/master

fix nginx Strict-Transport-Security example directive.

5 years agofix nginx Strict-Transport-Security example directive.
Christoph Gebhardt [Tue, 11 Feb 2014 23:02:28 +0000 (00:02 +0100)]
fix nginx Strict-Transport-Security example directive.

5 years agoAdded more details to the OpenVPN warnings.
Pepi Zawodsky [Tue, 11 Feb 2014 19:26:56 +0000 (20:26 +0100)]
Added more details to the OpenVPN warnings.

5 years agofixed typo
Julian [Tue, 11 Feb 2014 19:21:57 +0000 (20:21 +0100)]
fixed typo

5 years agoadded clarification on openvpn deprecation messages
Julian [Tue, 11 Feb 2014 19:21:21 +0000 (20:21 +0100)]
added clarification on openvpn deprecation messages

5 years agoAdded bug report by @bong0 for OpenVPN 2.3.2
Pepi Zawodsky [Tue, 11 Feb 2014 18:41:42 +0000 (19:41 +0100)]
Added bug report by @bong0 for OpenVPN 2.3.2

5 years agomore URLs converted to https
Viktor Szakats [Wed, 5 Feb 2014 20:04:30 +0000 (21:04 +0100)]
more URLs converted to https
removed duplicate link to http://checktls.com in command-line tool section
openssl.net -> openssl.org + https

5 years agoadded 'SSLStrictSNIVHostCheck off' to Apache SNI trick section
Adi Kriegisch [Mon, 3 Feb 2014 22:59:35 +0000 (23:59 +0100)]
added 'SSLStrictSNIVHostCheck off' to Apache SNI trick section

5 years agofix 'typo'
Adi Kriegisch [Mon, 3 Feb 2014 22:45:08 +0000 (23:45 +0100)]
fix 'typo'

5 years agoadded SNI trick to catch old browsers (apache)
Adi Kriegisch [Mon, 3 Feb 2014 22:36:48 +0000 (23:36 +0100)]
added SNI trick to catch old browsers (apache)

5 years agoadded SNI trick to catch old browsers (nginx)
Adi Kriegisch [Mon, 3 Feb 2014 21:30:20 +0000 (22:30 +0100)]
added SNI trick to catch old browsers (nginx)

5 years agoadded tinc as per push request on GitHub by VanNostrand - reformatted to our TeX...
Aaron Zauner [Mon, 3 Feb 2014 11:06:03 +0000 (12:06 +0100)]
added tinc as per push request on GitHub by VanNostrand - reformatted to our TeX layout, got rid of text that won\'t make sense in the paper (openssl stuff, already mentioned a lot in the paper)

5 years agoMerge pull request #48 from vszakats/use-more-https-urls
Aaron Zauner [Mon, 3 Feb 2014 10:36:27 +0000 (02:36 -0800)]
Merge pull request #48 from vszakats/use-more-https-urls

use https for all IETF URLs

5 years agoMerge pull request #49 from berq/master
Aaron Zauner [Mon, 3 Feb 2014 10:33:41 +0000 (02:33 -0800)]
Merge pull request #49 from berq/master

DBs.tex TODO

5 years agoFix copy&paste error
Alexander Wuerstlein [Sun, 2 Feb 2014 19:49:19 +0000 (20:49 +0100)]
Fix copy&paste error

5 years agoFix copy&paste error
Alexander Wuerstlein [Sun, 2 Feb 2014 19:47:38 +0000 (20:47 +0100)]
Fix copy&paste error

5 years agoChange "other protocols" to infrastructure recomm.
Alexander Wuerstlein [Sun, 2 Feb 2014 19:38:27 +0000 (20:38 +0100)]
Change "other protocols" to infrastructure recomm.

Give more general advice on a wider range of problems.
Changes suggested by pforai and azet.

5 years agoremark on passwords
Alexander Wuerstlein [Sun, 2 Feb 2014 19:37:45 +0000 (20:37 +0100)]
remark on passwords

5 years agoChange "other protocols" section to more general infrastructure recommendations
Alexander Wuerstlein [Sun, 2 Feb 2014 19:27:57 +0000 (20:27 +0100)]
Change "other protocols" section to more general infrastructure recommendations

5 years agoChange "other protocols" section to more general infrastructure recommendations
Alexander Wuerstlein [Sun, 2 Feb 2014 19:26:15 +0000 (20:26 +0100)]
Change "other protocols" section to more general infrastructure recommendations

5 years agos/IMB/IBM/
berq [Thu, 30 Jan 2014 19:02:39 +0000 (20:02 +0100)]
s/IMB/IBM/

5 years agoDone the things in the todo.md
berq [Thu, 30 Jan 2014 18:58:37 +0000 (19:58 +0100)]
Done the things in the todo.md

5 years agouse https for all IETF URLs
Viktor Szakats [Thu, 30 Jan 2014 13:19:29 +0000 (14:19 +0100)]
use https for all IETF URLs

5 years agoAdded task for improving the wording of the mailing list site
Pepi Zawodsky [Wed, 29 Jan 2014 20:09:52 +0000 (21:09 +0100)]
Added task for improving the wording of the mailing list site

5 years agoexclude ICS systems
Aaron Kaplan [Mon, 27 Jan 2014 09:09:15 +0000 (10:09 +0100)]
exclude ICS systems

5 years agoTODO Bugfix: Apache should recommend redirect instead of rewrite.
Pepi Zawodsky [Tue, 21 Jan 2014 23:58:04 +0000 (00:58 +0100)]
TODO Bugfix: Apache should recommend redirect instead of rewrite.

5 years agorm -f is as good as if [ -f ... ] ; then rm ...
Aaron Kaplan [Tue, 21 Jan 2014 00:29:26 +0000 (01:29 +0100)]
rm -f is as good as if [ -f ... ] ; then rm ...

5 years agoMerge branch 'master' of github.com:sebix/Applied-Crypto-Hardening into sebix-master
Aaron Kaplan [Mon, 20 Jan 2014 23:26:54 +0000 (00:26 +0100)]
Merge branch 'master' of github.com:sebix/Applied-Crypto-Hardening into sebix-master

5 years agoRevert "Updated make clean to prevent incorrect failures"
Aaron Kaplan [Mon, 20 Jan 2014 23:23:52 +0000 (00:23 +0100)]
Revert "Updated make clean to prevent incorrect failures"

This reverts commit 4a5f09431ac311fd13a553e03cf534903467daee.

5 years agonotes
Aaron Kaplan [Mon, 20 Jan 2014 23:21:10 +0000 (00:21 +0100)]
notes

5 years agoMerge branch 'master' of https://git.bettercrypto.org/ach-master
Aaron Kaplan [Mon, 20 Jan 2014 22:21:23 +0000 (23:21 +0100)]
Merge branch 'master' of https://git.bettercrypto.org/ach-master

5 years agonotes
Aaron Kaplan [Mon, 20 Jan 2014 22:21:11 +0000 (23:21 +0100)]
notes

5 years agoUpdated make clean to prevent incorrect failures
Pepi Zawodsky [Mon, 20 Jan 2014 21:03:16 +0000 (22:03 +0100)]
Updated make clean to prevent incorrect failures

5 years agonotes
Aaron Kaplan [Mon, 20 Jan 2014 20:38:05 +0000 (21:38 +0100)]
notes

5 years agokeep notes
Aaron Kaplan [Mon, 20 Jan 2014 20:21:33 +0000 (21:21 +0100)]
keep notes

5 years agodon't forget things we said during the meeting. put it into TODO.md
Aaron Kaplan [Mon, 20 Jan 2014 19:25:29 +0000 (20:25 +0100)]
don't forget things we said during the meeting. put it into TODO.md

5 years agoadd feedback by Tobias pape
Aaron Kaplan [Mon, 20 Jan 2014 18:53:16 +0000 (19:53 +0100)]
add feedback by Tobias pape

5 years agoSpell checking (used aspell, and dict.cc and wikipedia for reference)
sebix [Mon, 20 Jan 2014 17:44:08 +0000 (18:44 +0100)]
Spell checking (used aspell, and dict.cc and wikipedia for reference)

5 years agowarning in SSH-section about connection problems (has also been requested on mailinglist)
sebix [Mon, 20 Jan 2014 17:41:57 +0000 (18:41 +0100)]
warning in SSH-section about connection problems (has also been requested on mailinglist)

5 years agoMerge branch 'master' into kerberos
Alexander Wuerstlein [Sun, 19 Jan 2014 13:36:22 +0000 (14:36 +0100)]
Merge branch 'master' into kerberos

Conflicts:
src/practical_settings/kerberos.tex

5 years agoAdjusting listing box margin, was too for using texlive 2013, I had 2012
sebix [Sat, 18 Jan 2014 21:22:06 +0000 (22:22 +0100)]
Adjusting listing box margin, was too for using texlive 2013, I had 2012

5 years agoRevert paragraphDiamond
sebix [Fri, 17 Jan 2014 21:53:37 +0000 (22:53 +0100)]
Revert paragraphDiamond

5 years agoMerge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening
sebix [Fri, 17 Jan 2014 11:02:48 +0000 (12:02 +0100)]
Merge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening
and adjust the LaTeX code

Conflicts:
src/practical_settings/mailserver.tex
src/practical_settings/vpn.tex

5 years agoMerge pull request #46 from oglueck/master
Aaron Zauner [Fri, 17 Jan 2014 10:09:05 +0000 (02:09 -0800)]
Merge pull request #46 from oglueck/master

add Openswan

5 years agoadd Openswan
Ortwin Glück [Thu, 16 Jan 2014 16:16:09 +0000 (17:16 +0100)]
add Openswan

5 years agopostfix: docs are wrong, loglevel must be >= 1
cm [Thu, 16 Jan 2014 14:09:57 +0000 (15:09 +0100)]
postfix: docs are wrong, loglevel must be >= 1

5 years agoAdd information on ECDH-params for lighttpd
sebix [Sat, 11 Jan 2014 21:43:03 +0000 (22:43 +0100)]
Add information on ECDH-params for lighttpd

5 years agoMerge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening
sebix [Sat, 11 Jan 2014 21:41:58 +0000 (22:41 +0100)]
Merge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening

5 years agominor change
Aaron Kaplan [Sat, 11 Jan 2014 21:11:44 +0000 (22:11 +0100)]
minor change

5 years agorename TODO.txt to TODO.md so that it is easier to read on github
Aaron Kaplan [Sat, 11 Jan 2014 21:10:33 +0000 (22:10 +0100)]
rename TODO.txt to TODO.md so that it is easier to read on github