CrowdHailer / Ace

HTTP web server and client, supports http1 and http2

Home Page:https://hex.pm/packages/ace

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Proper SSL config for ACE

CharlesOkwuagwu opened this issue · comments

I have been seeing this error of recent from chrome(65): ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY.

I have been running the same self-cert without issues for a few months until recent.

For reference, testing curl -v -k https://41.79.64.38:3201/api/users/1 against the same ACE server gives no errors.

The following resorces might have some pointers to improving SSL security in general on ERLANG (and Pheonix). Maybe we can incorporate their findings into ACE?

https://elixirforum.com/t/making-ssl-tests-all-pass-for-phoenix-lets-encrypt/3507

http://ezgr.net/increasing-security-erlang-ssl-cowboy/

Regards.