nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-04-07 05:58:13 -05:00
Code

Strict-Transport-Security only if trusted

Browse Source
This commit is contained in:
Kyle Spearrin 2017-08-21 09:19:36 -04:00
parent 0120b91d24
commit 9049c48aed
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
util/Setup/Program.cs
View File

@ -60,7 +60,7 @@ namespace Setup
_ssl = _letsEncrypt; _ssl = _letsEncrypt;
if(!_letsEncrypt) if(!_letsEncrypt)
{ {
Console.Write("(!) Are you using your own SSL certificate? (y/n): "); Console.Write("(!) Do you have a SSL certificate to use? (y/n): ");
_ssl = Console.ReadLine().ToLowerInvariant() == "y"; _ssl = Console.ReadLine().ToLowerInvariant() == "y";
if(_ssl) if(_ssl)
@ -176,7 +176,7 @@ namespace Setup
{ {
if(!_ssl) if(!_ssl)
{ {
Console.Write("(!) Do you want to generate a self signed SSL certificate? (y/n): "); Console.Write("(!) Do you want to generate a self-signed SSL certificate? (y/n): ");
if(Console.ReadLine().ToLowerInvariant() == "y") if(Console.ReadLine().ToLowerInvariant() == "y")
{ {
Directory.CreateDirectory($"/bitwarden/ssl/self/{_domain}/"); Directory.CreateDirectory($"/bitwarden/ssl/self/{_domain}/");
@ -283,13 +283,12 @@ server {{
## verify chain of trust of OCSP response using Root CA and Intermediate certs ## verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate {sslPath}/{caFile}; ssl_trusted_certificate {sslPath}/{caFile};
resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=300s;"); resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=300s;
}
sw.WriteLine($@"
# This will enforce HTTP browsing into HTTPS and avoid ssl stripping attack. 6 months age # This will enforce HTTP browsing into HTTPS and avoid ssl stripping attack. 6 months age
add_header Strict-Transport-Security max-age=15768000;"); add_header Strict-Transport-Security max-age=15768000;");
} }
}
sw.WriteLine($@" sw.WriteLine($@"
# X-Frame-Options is to prevent from clickJacking attack # X-Frame-Options is to prevent from clickJacking attack