(1) Set up the https_port for the reverse proxy (You have to disable the client certificate authentication as the polygraph does not support it.)
(2) In the workload file, add these tags:
SslWrap wrap = {
protocols = [ "SSLv2":40%, "SSLv3", "TLSv1" ];
root_certificate = "/opt/exampleca/cacert.pem";
ciphers = [ "ALL:HIGH": 100% ];Also add this to Robot:
rsa_key_sizes = [ 1024bit ];
session_resumption = 40%;
session_cache = 100;
};
Proxy pxySsl = {
addresses = [ '10.191.237.4:8888' ];
server.ssl_wraps = [ wrap ];
};
use(pxySsl);
ssl_wraps = [ wrap ];
No comments:
Post a Comment