Nuxeo Drive and Live Edit supported SSL cipher suites

Michaël_Le_Cler — Wed, 26 Nov 2014 03:14:12 GMT

Hello,

Official documentation require a valid SSL server certificate for Nuxeo Live Edit (and probably for Nuxeo Drive) to work with HTTPS (for me a Nuxeo server behind an HTTPS only Apache proxy server).

Careful : supported SSL cipher suites (and SSL protocols) MUST be also checked in your server configuration.

Nuxeo Drive and Nuxeo Live Edit supported cipher suites are these ones (checked with Wireshark and translated in OpenSSL format by "openssl ciphers -V | grep [id_cipher_suite]") :
0x00,0x39 - DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1
0x00,0x38 - DHE-DSS-AES256-SHA SSLv3 Kx=DH Au=DSS Enc=AES(256) Mac=SHA1
0x00,0x35 - AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
0x00,0x16 - EDH-RSA-DES-CBC3-SHA SSLv3 Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1
0x00,0x13 - EDH-DSS-DES-CBC3-SHA SSLv3 Kx=DH Au=DSS Enc=3DES(168) Mac=SHA1
0x00,0x0A - DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
0x00,0x33 - DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1
0x00,0x32 - DHE-DSS-AES128-SHA SSLv3 Kx=DH Au=DSS Enc=AES(128) Mac=SHA1
0x00,0x2F - AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1
0x00,0x05 - RC4-SHA SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1
0x00,0x04 - RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5

Could someone add this to current documentation ?
Does the current development roadmap plan to enhance supported SSL cipher suites and protocols ?

Thansk in advance, Michaël Le Clerc

Re: Nuxeo Drive and Live Edit supported SSL cipher suites

Michaël_Le_Cler — Wed, 26 Nov 2014 07:41:51 GMT

Hello,

Re: Nuxeo Drive and Live Edit supported SSL cipher suites

Florent_Guillau — Wed, 26 Nov 2014 11:52:25 GMT

The cipher suites available are not really a characteristic of Nuxeo but more of the Java environment (JDK) installed on the server, the Tomcat SSL configuration, etc. And for Drive, they are a characteristic of the python runtime environment.

Re: Nuxeo Drive and Live Edit supported SSL cipher suites

Michaël_Le_Cler — Wed, 26 Nov 2014 19:37:07 GMT

Hello Florent,

topic Re: Nuxeo Drive and Live Edit supported SSL cipher suites in Nuxeo Forum

Nuxeo Drive and Live Edit supported SSL cipher suites

Re: Nuxeo Drive and Live Edit supported SSL cipher suites

Re: Nuxeo Drive and Live Edit supported SSL cipher suites

Re: Nuxeo Drive and Live Edit supported SSL cipher suites