Raymond Yee
949f22415b
a modern configuration from https://mozilla.github.io/server-side-tls/ssl-config-generator/
2015-03-10 16:07:15 -07:00
Raymond Yee
76738fec97
Merge branch 'master' into improve_ssl
2015-03-10 15:50:09 -07:00
Raymond Yee
cdb84dfffa
Working conclusion: use the configuration:
...
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
SSLHonorCipherOrder on
2015-03-10 15:48:02 -07:00
Raymond Yee
99350d6cc4
Merge pull request #466 from Gluejar/fix_ebook_add
...
Fix ebook add
2015-03-10 12:39:38 -07:00
eric
3bdec13270
display ebook errors for first ebook
2015-03-10 14:19:05 -04:00
eric
c3896b70d4
allow ebook creation without filesize
2015-03-10 14:18:34 -04:00
Raymond Yee
d6a2c54fac
Merge pull request #462 from Gluejar/kindle_file_size
...
Kindle file size
2015-03-09 12:12:01 -07:00
Raymond Yee
b0550999e1
incorporate changes from kindle safe title changes.
...
Merge branch 'master' into kindle_file_size
Conflicts:
frontend/views.py
2015-03-09 10:56:20 -07:00
Raymond Yee
c9fd007654
Merge pull request #461 from Gluejar/warn_kindle_address
...
flag kindle email addressed that don't contain "kindle" in them
2015-03-09 10:14:12 -07:00
Raymond Yee
d5c7b00d7c
Merge pull request #465 from Gluejar/fix_kindle_bugs
...
add comment about what fix_kindle_bugs does
2015-03-06 15:17:44 -08:00
Raymond Yee
71c8a95b90
add comment about what fix_kindle_bugs does
2015-03-06 15:16:04 -08:00
Raymond Yee
387c8d43e2
Merge pull request #460 from Gluejar/fix_kindle_bugs
...
provide a title that's kindle-safe
2015-03-06 15:06:21 -08:00
Raymond Yee
af7c61ac13
Merge pull request #463 from Gluejar/news_update
...
update news link
2015-03-06 14:01:28 -08:00
eric
355e50b297
update news link
2015-03-06 16:32:21 -05:00
eric
0c4550fe4a
save ebook file size on send_to_kindle
...
don't deal with booxtream (b2u) ebooks at a all, only deal with free
ebooks
2015-03-05 22:30:03 -05:00
eric
5057820f30
update for mac yosemite
2015-03-05 22:26:25 -05:00
eric
94d9571e25
flag kindle email addressed that don't contain "kindle" in them
...
only valid kindle addresses we've seen not in kindle.com domain are
kindle.cn. Wanted to allow other addresses just in case.
2015-03-05 17:35:55 -05:00
Raymond Yee
2e274b4e2b
config without RC4
...
://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy
2015-03-05 12:30:47 -08:00
Raymond Yee
8506df2480
need "" around ciphers
2015-03-05 12:26:40 -08:00
Raymond Yee
2685940069
ooops typo
2015-03-05 12:25:34 -08:00
Raymond Yee
c9a0fc8ee7
tweak from the article
...
SSLCipherSuite EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS +RC4 RC4
2015-03-05 12:24:20 -08:00
Raymond Yee
bcc1abed00
Now let's try https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy
2015-03-05 12:15:12 -08:00
Raymond Yee
25b8749206
Let's see what using the old configuration to be more compatible with old browsers does for the ssl test
2015-03-05 12:07:30 -08:00
Raymond Yee
9477ae66f2
first config try didn't up our score....now trying config generated by mozilla
2015-03-04 11:35:25 -08:00
Raymond Yee
5c64cfac38
testing SSL configuration to try to disallow RC4 and enable forward secrecy
2015-03-04 10:53:54 -08:00
eric
f05b276118
provide a title that's kindle-safe
2015-03-03 17:39:23 -05:00
Raymond Yee
9c4d609579
Merge pull request #459 from Gluejar/download-nits
...
add inactive download counts in rh tools [fix #88928040 ]
2015-02-25 11:21:08 -08:00
Raymond Yee
2390c322a4
Merge pull request #458 from Gluejar/email_message
...
sharing issues [fix #88552056 ][fix #88631150 ]
2015-02-25 11:19:26 -08:00
eric
84227748db
add inactive download counts in rh tools
2015-02-23 16:52:55 -05:00
Raymond Yee
b9a36337cf
Merge pull request #457 from Gluejar/revamp-search
...
Revamp search
2015-02-19 16:30:27 -08:00
eric
1c549173f4
vanish scroll down on scroll, leave more space for list
2015-02-19 14:09:13 -05:00
eric
cb8fc2feec
add scroll-down hint
2015-02-19 12:03:42 -05:00
eric
11b9d5da3e
make widget work with work ids
2015-02-18 13:09:43 -05:00
eric
53ecbfcb5f
DRY for safe_get_work
2015-02-18 12:47:19 -05:00
eric
06dcebc3be
stop using first_ebook where it means is_free
2015-02-17 17:06:10 -05:00
eric
386d541acc
share email message now considers is_free
2015-02-17 16:59:51 -05:00
eric
b467c185eb
improve test coverage
2015-02-12 13:37:51 -05:00
eric
97fc3f9322
remove most google books branding
2015-02-12 10:00:01 -05:00
eric
23099a0b21
search now looks at all the free books
2015-02-12 09:46:58 -05:00
eshellman
21cfc7a1df
Merge pull request #456 from Gluejar/upgrade_django
...
upgrade from Django 1.4.5 to 1.4.19
2015-02-09 20:28:18 -05:00
Raymond Yee
5f252dc83a
let's first upgrade to the latest version Django 1.4.x to see what happens
2015-02-09 10:11:47 -08:00
Raymond Yee
6c1b14c3cc
Merge pull request #455 from Gluejar/manage_subjects
...
fixed an incorrect reference, uncovered by the tests!
2015-02-03 15:43:14 -08:00
Raymond Yee
a9d4a71912
fixed an incorrect reference, uncovered by the tests!
2015-02-03 15:41:38 -08:00
Raymond Yee
ea815fb948
Merge pull request #453 from Gluejar/manage_subjects
...
Manage subjects
2015-02-03 14:04:39 -08:00
eric
53b62642cd
more idiomatic increment
2015-02-02 13:31:10 -05:00
eric
c714de0d67
also for doab records
2015-01-30 11:39:48 -05:00
eric
7cb0f473de
remove many-commas subjects, prevent their addition
2015-01-30 11:33:22 -05:00
Raymond Yee
67fc56733f
Merge pull request #452 from Gluejar/tweak_select_edition
...
2 management tweaks
2015-01-29 13:33:38 -08:00
eric
f552fda1a7
set_featured should redirect to landing
...
the previous behavior caused some accidental re-featuring because the
url has an effect in addition to the display
2015-01-29 14:25:55 -05:00
eric
bff7866b67
change work title when edition is selected
2015-01-29 14:19:02 -05:00