SSL on all main dolphin-emu.org properties

[delroth]

On OSX it's a bit less pointless since bypassing Gatekeeper is a bit more complicated. However, I'm not sure how easy it is for an individual and/or an informal organization (like our current development team) to get a code signing certificate. I'll have to investigate - if I implement this it will probably be in a few months. Added to my TODO.

[ExtremeDude2]

I get this on chrome, it must have somthing to do with embeding youtube videos because there was an "Unsafe script" disabled and when I enabled it I could see the videos again

[delroth]

Makes sense, I'll fix that.

EDIT: should be fixed: https://www.youtube.com/watch?v=oHg5SJYRHA0

[ExtremeDude2]

Yep, looks fixed

[tueidj]

Certum offers free code signing certificates for open source projects... if you can manage to get a response from them.

[seredlek]

Havin SSL enabled on all pages is a nice thing.
https://www.ssllabs.com/ssltest/analyze.html?d=dolphin-emu.org on the other hand makes it look pretty bad,
weak cipher suites, no forward secrecy outdated ssl/tls versions supported.
You could have a look at https://www.ssllabs.com/projects/best-practices/ for example and check the webserver manual again

[ExtremeDude2]

Did we lose our 256-bit encryption to 128? D:

[delroth]

(09-28-2013, 07:04 PM)seredlek Wrote: Havin SSL enabled on all pages is a nice thing.
https://www.ssllabs.com/ssltest/analyze.html?d=dolphin-emu.org on the other hand makes it look pretty bad,
weak cipher suites, no forward secrecy outdated ssl/tls versions supported.
You could have a look at https://www.ssllabs.com/projects/best-practices/ for example and check the webserver manual again

Right, if you want to improve that, please provide an enhanced SSL module for Python 2.7 that supports the SSLContext utility from Python 3.x. Without that there is no way to provide better SSL support in the reverse proxy placed in front of www/forums/wiki.dolphin-emu.org (which is based on Python 2.7).

[seredlek]

(04-24-2014, 04:39 AM)delroth Wrote: Right, if you want to improve that, please provide an enhanced SSL module for Python 2.7 that supports the SSLContext utility from Python 3.x. Without that there is no way to provide better SSL support in the reverse proxy placed in front of www/forums/wiki.dolphin-emu.org (which is based on Python 2.7).

Which software are you using for the reverse proxy?

[delroth]

This is some custom reverse proxy used on the web hosting provider that hosts our websites.