Please enable JavaScript to view this site.
Qualys Labs provides an excellent service for testing your website's SSL configuration. The testing tool is found at https://www.ssllabs.com/ssltest/.
The testing results for WebTracker.one shows the following results:
One of the most common findings by SSL Labs is that a site supports outdated versions of SSL/TLS - anything prior to TLS v1.2.
I primarily relied on the configurations provided by Lets Encrypt when I installed their free SLL certificate. Lets Encrypt has an easy-to-use tool called Certbot for certificate installation. Lets Encrypt provides detailed instructions.
The specific SSL configuration rules for webtracker.one are found in the following directory:
You can generate configuration rules with the Mozilla SSL Configuration Generator.
The testing results for WebTracker.one shows the following results:
One of the most common findings by SSL Labs is that a site supports outdated versions of SSL/TLS - anything prior to TLS v1.2.
I primarily relied on the configurations provided by Lets Encrypt when I installed their free SLL certificate. Lets Encrypt has an easy-to-use tool called Certbot for certificate installation. Lets Encrypt provides detailed instructions.
The specific SSL configuration rules for webtracker.one are found in the following directory:
/etc/letsencrypt/options-ssl-apache.conf
# Intermediate configuration
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
SSLHonorCipherOrder off
SSLSessionTickets off
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
SSLHonorCipherOrder off
SSLSessionTickets off
You can generate configuration rules with the Mozilla SSL Configuration Generator.
* posted by Robert on Mon, Jul 11, 2022
