Commit Graph

4937 Commits (949f22415b5995d62731fc7fff18bf36aeb05009)

Author SHA1 Message Date
Raymond Yee 949f22415b a modern configuration from https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2015-03-10 16:07:15 -07:00
Raymond Yee 76738fec97 Merge branch 'master' into improve_ssl 2015-03-10 15:50:09 -07:00
Raymond Yee cdb84dfffa Working conclusion: use the configuration:
SSLProtocol             all -SSLv2 -SSLv3
SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
SSLHonorCipherOrder     on
2015-03-10 15:48:02 -07:00
Raymond Yee 99350d6cc4 Merge pull request #466 from Gluejar/fix_ebook_add
Fix ebook add
2015-03-10 12:39:38 -07:00
eric 3bdec13270 display ebook errors for first ebook 2015-03-10 14:19:05 -04:00
eric c3896b70d4 allow ebook creation without filesize 2015-03-10 14:18:34 -04:00
Raymond Yee d6a2c54fac Merge pull request #462 from Gluejar/kindle_file_size
Kindle file size
2015-03-09 12:12:01 -07:00
Raymond Yee b0550999e1 incorporate changes from kindle safe title changes.
Merge branch 'master' into kindle_file_size

Conflicts:
	frontend/views.py
2015-03-09 10:56:20 -07:00
Raymond Yee c9fd007654 Merge pull request #461 from Gluejar/warn_kindle_address
flag kindle email addressed that don't contain "kindle" in them
2015-03-09 10:14:12 -07:00
Raymond Yee d5c7b00d7c Merge pull request #465 from Gluejar/fix_kindle_bugs
add comment about what fix_kindle_bugs does
2015-03-06 15:17:44 -08:00
Raymond Yee 71c8a95b90 add comment about what fix_kindle_bugs does 2015-03-06 15:16:04 -08:00
Raymond Yee 387c8d43e2 Merge pull request #460 from Gluejar/fix_kindle_bugs
provide a title that's kindle-safe
2015-03-06 15:06:21 -08:00
Raymond Yee af7c61ac13 Merge pull request #463 from Gluejar/news_update
update news link
2015-03-06 14:01:28 -08:00
eric 355e50b297 update news link 2015-03-06 16:32:21 -05:00
eric 0c4550fe4a save ebook file size on send_to_kindle
don't deal with booxtream (b2u) ebooks at a all, only deal with free
ebooks
2015-03-05 22:30:03 -05:00
eric 5057820f30 update for mac yosemite 2015-03-05 22:26:25 -05:00
eric 94d9571e25 flag kindle email addressed that don't contain "kindle" in them
only valid kindle addresses we've seen not in kindle.com domain are
kindle.cn. Wanted to allow other addresses just in case.
2015-03-05 17:35:55 -05:00
Raymond Yee 2e274b4e2b config without RC4
://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy
2015-03-05 12:30:47 -08:00
Raymond Yee 8506df2480 need "" around ciphers 2015-03-05 12:26:40 -08:00
Raymond Yee 2685940069 ooops typo 2015-03-05 12:25:34 -08:00
Raymond Yee c9a0fc8ee7 tweak from the article
SSLCipherSuite EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS +RC4 RC4
2015-03-05 12:24:20 -08:00
Raymond Yee bcc1abed00 Now let's try https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy 2015-03-05 12:15:12 -08:00
Raymond Yee 25b8749206 Let's see what using the old configuration to be more compatible with old browsers does for the ssl test 2015-03-05 12:07:30 -08:00
Raymond Yee 9477ae66f2 first config try didn't up our score....now trying config generated by mozilla 2015-03-04 11:35:25 -08:00
Raymond Yee 5c64cfac38 testing SSL configuration to try to disallow RC4 and enable forward secrecy 2015-03-04 10:53:54 -08:00
eric f05b276118 provide a title that's kindle-safe 2015-03-03 17:39:23 -05:00
Raymond Yee 9c4d609579 Merge pull request #459 from Gluejar/download-nits
add inactive download counts in rh tools [fix #88928040]
2015-02-25 11:21:08 -08:00
Raymond Yee 2390c322a4 Merge pull request #458 from Gluejar/email_message
sharing issues [fix #88552056][fix #88631150]
2015-02-25 11:19:26 -08:00
eric 84227748db add inactive download counts in rh tools 2015-02-23 16:52:55 -05:00
Raymond Yee b9a36337cf Merge pull request #457 from Gluejar/revamp-search
Revamp search
2015-02-19 16:30:27 -08:00
eric 1c549173f4 vanish scroll down on scroll, leave more space for list 2015-02-19 14:09:13 -05:00
eric cb8fc2feec add scroll-down hint 2015-02-19 12:03:42 -05:00
eric 11b9d5da3e make widget work with work ids 2015-02-18 13:09:43 -05:00
eric 53ecbfcb5f DRY for safe_get_work 2015-02-18 12:47:19 -05:00
eric 06dcebc3be stop using first_ebook where it means is_free 2015-02-17 17:06:10 -05:00
eric 386d541acc share email message now considers is_free 2015-02-17 16:59:51 -05:00
eric b467c185eb improve test coverage 2015-02-12 13:37:51 -05:00
eric 97fc3f9322 remove most google books branding 2015-02-12 10:00:01 -05:00
eric 23099a0b21 search now looks at all the free books 2015-02-12 09:46:58 -05:00
eshellman 21cfc7a1df Merge pull request #456 from Gluejar/upgrade_django
upgrade from Django 1.4.5 to 1.4.19
2015-02-09 20:28:18 -05:00
Raymond Yee 5f252dc83a let's first upgrade to the latest version Django 1.4.x to see what happens 2015-02-09 10:11:47 -08:00
Raymond Yee 6c1b14c3cc Merge pull request #455 from Gluejar/manage_subjects
fixed an incorrect reference, uncovered by the tests!
2015-02-03 15:43:14 -08:00
Raymond Yee a9d4a71912 fixed an incorrect reference, uncovered by the tests! 2015-02-03 15:41:38 -08:00
Raymond Yee ea815fb948 Merge pull request #453 from Gluejar/manage_subjects
Manage subjects
2015-02-03 14:04:39 -08:00
eric 53b62642cd more idiomatic increment 2015-02-02 13:31:10 -05:00
eric c714de0d67 also for doab records 2015-01-30 11:39:48 -05:00
eric 7cb0f473de remove many-commas subjects, prevent their addition 2015-01-30 11:33:22 -05:00
Raymond Yee 67fc56733f Merge pull request #452 from Gluejar/tweak_select_edition
2 management tweaks
2015-01-29 13:33:38 -08:00
eric f552fda1a7 set_featured should redirect to landing
the previous behavior caused some accidental re-featuring because the
url has an effect in addition to the display
2015-01-29 14:25:55 -05:00
eric bff7866b67 change work title when edition is selected 2015-01-29 14:19:02 -05:00