nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Nuxeo Drive and Live Edit supported SSL cipher suites

Michaël_Le_Cler

Hello,

Official documentation require a valid SSL server certificate for Nuxeo Live Edit (and probably for Nuxeo Drive) to work with HTTPS (for me a Nuxeo server behind an HTTPS only Apache proxy server).

Careful : supported SSL cipher suites (and SSL protocols) MUST be also checked in your server configuration.

Nuxeo Drive and Nuxeo Live Edit supported cipher suites are these ones (checked with Wireshark and translated in OpenSSL format by "openssl ciphers -V | grep [id_cipher_suite]") :
0x00,0x39 - DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1
0x00,0x38 - DHE-DSS-AES256-SHA SSLv3 Kx=DH Au=DSS Enc=AES(256) Mac=SHA1
0x00,0x35 - AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
0x00,0x16 - EDH-RSA-DES-CBC3-SHA SSLv3 Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1
0x00,0x13 - EDH-DSS-DES-CBC3-SHA SSLv3 Kx=DH Au=DSS Enc=3DES(168) Mac=SHA1
0x00,0x0A - DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
0x00,0x33 - DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1
0x00,0x32 - DHE-DSS-AES128-SHA SSLv3 Kx=DH Au=DSS Enc=AES(128) Mac=SHA1
0x00,0x2F - AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1
0x00,0x05 - RC4-SHA SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1
0x00,0x04 - RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5

Could someone add this to current documentation ?
Does the current development roadmap plan to enhance supported SSL cipher suites and protocols ?

Thansk in advance, Michaël Le Clerc

Find more posts tagged with

Comments

Michaël_Le_Cler

Hello,

Florent_Guillau

The cipher suites available are not really a characteristic of Nuxeo but more of the Java environment (JDK) installed on the server, the Tomcat SSL configuration, etc. And for Drive, they are a characteristic of the python runtime environment.

Michaël_Le_Cler

Hello Florent,