Nuxeo Drive and Live Edit supported SSL cipher suites

[Michaël_Le_Cler]

Hello,

Official documentation require a valid SSL server certificate for Nuxeo Live Edit (and probably for Nuxeo Drive) to work with HTTPS (for me a Nuxeo server behind an HTTPS only Apache proxy server).

Careful : supported SSL cipher suites (and SSL protocols) MUST be also checked in your server configuration.

Nuxeo Drive and Nuxeo Live Edit supported cipher suites are these ones (checked with Wireshark and translated in OpenSSL format by "openssl ciphers -V | grep [id_cipher_suite]") :
0x00,0x39 - DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1
0x00,0x38 - DHE-DSS-AES256-SHA SSLv3 Kx=DH Au=DSS Enc=AES(256) Mac=SHA1
0x00,0x35 - AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
0x00,0x16 - EDH-RSA-DES-CBC3-SHA SSLv3 Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1
0x00,0x13 - EDH-DSS-DES-CBC3-SHA SSLv3 Kx=DH Au=DSS Enc=3DES(168) Mac=SHA1
0x00,0x0A - DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
0x00,0x33 - DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1
0x00,0x32 - DHE-DSS-AES128-SHA SSLv3 Kx=DH Au=DSS Enc=AES(128) Mac=SHA1
0x00,0x2F - AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1
0x00,0x05 - RC4-SHA SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1
0x00,0x04 - RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5

Could someone add this to current documentation ?
Does the current development roadmap plan to enhance supported SSL cipher suites and protocols ?

Thansk in advance, Michaël Le Clerc

[Michaël_Le_Cler]

Hello,

[Florent_Guillau]

The cipher suites available are not really a characteristic of Nuxeo but more of the Java environment (JDK) installed on the server, the Tomcat SSL configuration, etc. And for Drive, they are a characteristic of the python runtime environment.

[Michaël_Le_Cler]

Hello Florent,