{"action":"opened","issue":{"url":"https://api.github.com/repos/magda-io/magda/issues/1354","repository_url":"https://api.github.com/repos/magda-io/magda","labels_url":"https://api.github.com/repos/magda-io/magda/issues/1354/labels{/name}","comments_url":"https://api.github.com/repos/magda-io/magda/issues/1354/comments","events_url":"https://api.github.com/repos/magda-io/magda/issues/1354/events","html_url":"https://github.com/magda-io/magda/issues/1354","id":337754327,"node_id":"MDU6SXNzdWUzMzc3NTQzMjc=","number":1354,"title":"Eliminate DES-CBC3-SHA Weak Cypher","user":{"login":"AlexGilleran","id":900555,"node_id":"MDQ6VXNlcjkwMDU1NQ==","avatar_url":"https://avatars1.githubusercontent.com/u/900555?v=4","gravatar_id":"","url":"https://api.github.com/users/AlexGilleran","html_url":"https://github.com/AlexGilleran","followers_url":"https://api.github.com/users/AlexGilleran/followers","following_url":"https://api.github.com/users/AlexGilleran/following{/other_user}","gists_url":"https://api.github.com/users/AlexGilleran/gists{/gist_id}","starred_url":"https://api.github.com/users/AlexGilleran/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AlexGilleran/subscriptions","organizations_url":"https://api.github.com/users/AlexGilleran/orgs","repos_url":"https://api.github.com/users/AlexGilleran/repos","events_url":"https://api.github.com/users/AlexGilleran/events{/privacy}","received_events_url":"https://api.github.com/users/AlexGilleran/received_events","type":"User","site_admin":false},"labels":[{"id":955966652,"node_id":"MDU6TGFiZWw5NTU5NjY2NTI=","url":"https://api.github.com/repos/magda-io/magda/labels/priority:%20high","name":"priority: high","color":"f9d0c4","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-07-03T05:50:34Z","updated_at":"2018-07-03T05:50:34Z","closed_at":null,"author_association":"MEMBER","body":"### Problem description\r\nApparently we're accepting the DES-CBC3-SHA cypher on search.gov.au, which is vulnerable to the FREAK attack. We need to figure out how to remove it... most likely we should just change search.data.gov.au over to the Google CDN, then make sure that's not allowing this cypher.\r\n\r\n```\r\nSupported Server Cipher(s):\r\nPreferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256\r\nAccepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-256 DHE 256\r\nAccepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256\r\nAccepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256\r\nAccepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384\r\nAccepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA\r\nAccepted TLSv1.2 128 bits AES128-GCM-SHA256\r\nAccepted TLSv1.2 256 bits AES256-GCM-SHA384\r\nAccepted TLSv1.2 128 bits AES128-SHA256\r\nAccepted TLSv1.2 256 bits AES256-SHA\r\nAccepted TLSv1.2 128 bits AES128-SHA\r\n*Accepted TLSv1.2 112 bits DES-CBC3-SHA*\r\n\r\nPreferred \r\nTLSv1.1 128 bits ECDHE-RSA-AES128-SHA\r\nAccepted TLSv1.1 256 bits ECDHE-RSA-AES256-SHA \r\nAccepted TLSv1.1 256 bits AES256-SHA\r\nAccepted TLSv1.1 128 bits AES128-SHA\r\n*Accepted TLSv1.1 112 bits DES-CBC3-SHA*\r\nPreferred TLSv1.0 128 bits ECDHE-RSA-AES128-SHA\r\nAccepted TLSv1.0 256 bits ECDHE-RSA-AES256-SHA\r\nAccepted TLSv1.0 256 bits AES256-SHA\r\nAccepted TLSv1.0 128 bits AES128-SHA\r\n```"}}
{"actor":{"display_login":"AlexGilleran"}}