cara setting SSL yg benar

Discussion in 'Masalah Teknik dan Keamanan' started by Tiroid, 7 Jan 2016.

Thread Status:
Not open for further replies.
  1. Tiroid

    Tiroid Poster 1.0

    Messages:
    68
    Likes Received:
    9
    Trophy Points:
    8
    mau tanya cara setting SSL yg benar bagaimana yah ?
    terutama untuk Cipher Suites dan protocol nya
    soalnya ada beberapa ssl yg di tes di https://www.ssllabs.com/ssltest/index.html
    ada yg sdh A / A+ dan B+
    padahal type dan jenis SSL sama, jg dr provider yg sama, seperti comodo

    terima kasih sebelumnya
     
  2. mustafaramadhan

    mustafaramadhan Hosting Guru

    Messages:
    3,237
    Likes Received:
    857
    Trophy Points:
    113
    Setidaknya dipengaruhi Protocol (versi tls atau ssl), Signature algorithm (SHAwithRSA atau SHA256withRSA) dan Key (1024, 2048 atau 4096).
     
    Effendi likes this.
  3. junior riau

    junior riau Hosting Guru Web Hosting

    Messages:
    3,229
    Likes Received:
    515
    Trophy Points:
    113
    chiper nya juga mempengaruhi
     
  4. iidbae

    iidbae Apprentice 2.0

    Messages:
    449
    Likes Received:
    87
    Trophy Points:
    28
    Memengaruhi Om @junior riau hehehe.

    Lapak Saya masih B ssl nya.
    Kalau di google, ada kan yaj cara bikin jadi A?
     
  5. junior riau

    junior riau Hosting Guru Web Hosting

    Messages:
    3,229
    Likes Received:
    515
    Trophy Points:
    113
    boleh tau lapak nya?
    nanti kita share, lapak saya alhamdulillah A :)
     
    iidbae likes this.
  6. paijo2

    paijo2 Apprentice 1.0

    Messages:
    234
    Likes Received:
    30
    Trophy Points:
    28
  7. junior riau

    junior riau Hosting Guru Web Hosting

    Messages:
    3,229
    Likes Received:
    515
    Trophy Points:
    113
  8. iidbae

    iidbae Apprentice 2.0

    Messages:
    449
    Likes Received:
    87
    Trophy Points:
    28
    Aseekk mau dibantuin.

    Lapak saya sesuait signature saya, https://tarjiem.com/

    Belum diotak-atik sih, soalnya belum mendalami betul dunia eVPeeS. Masih ngeri ketemu command line. hehehehe
     
  9. junior riau

    junior riau Hosting Guru Web Hosting

    Messages:
    3,229
    Likes Received:
    515
    Trophy Points:
    113
    ini apache saya
    SSLProtocol All -SSLv2 -SSLv3
    SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
    SSLHonorCipherOrder on
     
  10. pluto01

    pluto01 Hosting Guru Web Hosting

    Messages:
    3,680
    Likes Received:
    757
    Trophy Points:
    113
    Mas @iidbae
    Belum juga yach Mas :D, harusnya jika Mas perhatikan baik2 infonya saya yakin dan percaya bisa mas fix karena mas punya "keahlian" itu
    Jika tdk salah mas kenanya di Diffie Hellman Group yach (CMIIW) ? yg di 1024-bit, coba rubah ke 2048-bit, jika masih sama dan juga perhatikan ciphernya

    oh yach btw, mas nginx, tinggal disesuaikan harusnya
     
    iidbae likes this.
Loading...
Thread Status:
Not open for further replies.

Share This Page

Loading...