{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-websites/issues/231","repository_url":"https://api.github.com/repos/joomla/joomla-websites","labels_url":"https://api.github.com/repos/joomla/joomla-websites/issues/231/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-websites/issues/231/comments","events_url":"https://api.github.com/repos/joomla/joomla-websites/issues/231/events","html_url":"https://github.com/joomla/joomla-websites/issues/231","id":138037191,"number":231,"title":"[All] https configuration","user":{"login":"andrepereiradasilva","id":9630530,"avatar_url":"https://avatars.githubusercontent.com/u/9630530?v=3","gravatar_id":"","url":"https://api.github.com/users/andrepereiradasilva","html_url":"https://github.com/andrepereiradasilva","followers_url":"https://api.github.com/users/andrepereiradasilva/followers","following_url":"https://api.github.com/users/andrepereiradasilva/following{/other_user}","gists_url":"https://api.github.com/users/andrepereiradasilva/gists{/gist_id}","starred_url":"https://api.github.com/users/andrepereiradasilva/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrepereiradasilva/subscriptions","organizations_url":"https://api.github.com/users/andrepereiradasilva/orgs","repos_url":"https://api.github.com/users/andrepereiradasilva/repos","events_url":"https://api.github.com/users/andrepereiradasilva/events{/privacy}","received_events_url":"https://api.github.com/users/andrepereiradasilva/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/joomla/joomla-websites/labels/in%20progress","name":"in progress","color":"006b75"},{"url":"https://api.github.com/repos/joomla/joomla-websites/labels/update%20needed","name":"update needed","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-03-03T00:39:21Z","updated_at":"2016-03-03T14:42:09Z","closed_at":null,"body":"Following @mbabker unfortunately closed before finalized issue (https://github.com/joomla/joomla-websites/issues/20) made a SSL configuration test to most joomla domains.\r\nUsed SSL Labs Server scan for that: https://www.ssllabs.com/ssltest/\r\n\r\nBelow are the results. Click the links in the grades for detailed results.\r\n\r\n| Domain                | Grade | Observations                                 |\r\n|:--------------------- |:--------------:|:-------------------------------------------- |\r\n joomla.org \t\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n api.joomla.org \t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=api.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n appscdn.joomla.org \t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=appscdn.joomla.org&hideResults=on) | Incorrect cert order\r\n cdn.joomla.org \t\t\t\t| [Grade **A-**](https://www.ssllabs.com/ssltest/analyze.html?d=cdn.joomla.org&hideResults=on) | no forward secrecy, incorrect cert order\r\n certification.joomla.org\t \t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=certification.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n community.joomla.org \t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=community.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n conference.joomla.org\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=conference.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n demo.joomla.org\t\t\t\t| [Grade **C**](https://www.ssllabs.com/ssltest/analyze.html?d=demo.joomla.org&hideResults=on) | several issues\r\n developer.joomla.org\t\t\t| [Grade **C**](https://www.ssllabs.com/ssltest/analyze.html?d=developer.joomla.org&hideResults=on) | several issues\r\n docs.joomla.org\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=docs.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n downloads.joomla.org\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=downloads.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n events.joomla.org\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=events.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n exam.joomla.org\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=exam.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n extensions.joomla.org\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=extensions.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n extensionscdn.joomla.org\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=extensionscdn.joomla.org&hideResults=on) | no issues\r\n forum.joomla.org\t\t\t\t| [No Support](https://www.ssllabs.com/ssltest/analyze.html?d=forum.joomla.org&hideResults=on) | -\r\n framework.joomla.org\t\t\t| [Grade **C**](https://www.ssllabs.com/ssltest/analyze.html?d=framework.joomla.org&hideResults=on) | several issues\r\n help.joomla.org\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=help.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n issues.joomla.org\t\t\t\t| [Grade **C**](https://www.ssllabs.com/ssltest/analyze.html?d=issues.joomla.org&hideResults=on) | several issues\r\n joomlacode.org\t\t\t\t| [Error](https://www.ssllabs.com/ssltest/analyze.html?d=joomlacode.org&hideResults=on) | Certificate name mismatch \r\n magazine.joomla.org\t\t\t| [Grade **B**](https://www.ssllabs.com/ssltest/analyze.html?d=magazine.joomla.org&hideResults=on) | Several issues\r\n opensourcematters.org\t\t\t| [Error](https://www.ssllabs.com/ssltest/analyze.html?d=opensourcematters.org&hideResults=on) | Certificate name mismatch \r\n resources.joomla.org\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=resources.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n shop.joomla.org\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=shop.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n update.joomla.org\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=update.joomla.org&hideResults=on) | no issues\r\n vel.joomla.org\t\t\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=vel.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n volunteers.joomla.org\t\t\t| [Grade A](https://www.ssllabs.com/ssltest/analyze.html?d=volunteers.joomla.org&hideResults=on) | Sha-1 intermediates certs\r\n joom.la\t\t\t\t\t\t| [Error](https://www.ssllabs.com/ssltest/analyze.html?d=joom.la&hideResults=on) | Certificate name mismatch "},"comment":{"url":"https://api.github.com/repos/joomla/joomla-websites/issues/comments/191792547","html_url":"https://github.com/joomla/joomla-websites/issues/231#issuecomment-191792547","issue_url":"https://api.github.com/repos/joomla/joomla-websites/issues/231","id":191792547,"user":{"login":"andrepereiradasilva","id":9630530,"avatar_url":"https://avatars.githubusercontent.com/u/9630530?v=3","gravatar_id":"","url":"https://api.github.com/users/andrepereiradasilva","html_url":"https://github.com/andrepereiradasilva","followers_url":"https://api.github.com/users/andrepereiradasilva/followers","following_url":"https://api.github.com/users/andrepereiradasilva/following{/other_user}","gists_url":"https://api.github.com/users/andrepereiradasilva/gists{/gist_id}","starred_url":"https://api.github.com/users/andrepereiradasilva/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrepereiradasilva/subscriptions","organizations_url":"https://api.github.com/users/andrepereiradasilva/orgs","repos_url":"https://api.github.com/users/andrepereiradasilva/repos","events_url":"https://api.github.com/users/andrepereiradasilva/events{/privacy}","received_events_url":"https://api.github.com/users/andrepereiradasilva/received_events","type":"User","site_admin":false},"created_at":"2016-03-03T14:42:09Z","updated_at":"2016-03-03T14:42:09Z","body":"ok good.\r\n\r\nreggarding the sha-1 intermediate cert...\r\n\r\nIn reality is not an intermediate cert that is with SHA-1 is the root CA cert (GeoTrust Global CA) that the server shouldn't be sending.\r\n\r\nThe chain of trust is build from the root CA certs installed on every client OS, so every client must have the GeoTrust Global CA certificate for the certificate to be trusted. In conclusion, the server shouldn't send the root CA cert."}}