{"id":23235909,"url":"https://github.com/billmeyer/extended-ssl-baseline","last_synced_at":"2025-06-26T15:33:37.057Z","repository":{"id":89565981,"uuid":"96938087","full_name":"billmeyer/extended-ssl-baseline","owner":"billmeyer","description":null,"archived":false,"fork":false,"pushed_at":"2017-07-11T21:31:03.000Z","size":1,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-05T20:36:23.587Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/billmeyer.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-07-11T21:18:56.000Z","updated_at":"2017-07-11T21:20:27.000Z","dependencies_parsed_at":"2023-06-29T03:01:06.850Z","dependency_job_id":null,"html_url":"https://github.com/billmeyer/extended-ssl-baseline","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/billmeyer/extended-ssl-baseline","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/billmeyer%2Fextended-ssl-baseline","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/billmeyer%2Fextended-ssl-baseline/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/billmeyer%2Fextended-ssl-baseline/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/billmeyer%2Fextended-ssl-baseline/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/billmeyer","download_url":"https://codeload.github.com/billmeyer/extended-ssl-baseline/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/billmeyer%2Fextended-ssl-baseline/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262094890,"owners_count":23258058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-12-19T03:29:53.586Z","updated_at":"2025-06-26T15:33:37.015Z","avatar_url":"https://github.com/billmeyer.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Extended SSL Baseline Profile\n\nThis InSpec profile extends the [dev-sec/ssl-baseline](https://github.com/dev-sec/ssl-baseline) profile to properly harden an Apache HTTPd SSL configuration.  Specifically, it skips the __enc-cbc__ control as Apache won't load properly if the following cipher suites aren't minimally specified:\n\n```\nSSLProtocol -all +TLSv1.2\nSSLCipherSuite ALL:+HIGH:!RSA:!DH:!ADH:!EXP:!SSLv2:!SSLv3:!MEDIUM:!LOW:!NULL:!aNULL\n```\n\nresulting in the following runtime state:\n\n```\nStarting Nmap 6.40 ( http://nmap.org ) at 2017-07-11 15:45 CDT\nPORT    STATE SERVICE\n443/tcp open  https\n| ssl-enum-ciphers:\n|   SSLv3: No supported ciphers found\n|   TLSv1.2:\n|     ciphers:\n|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 - strong\n|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 - strong\n|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - strong\n|     compressors:\n|       NULL\n|_  least strength: strong\n\nNmap done: 1 IP address (1 host up) scanned in 0.19 seconds\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbillmeyer%2Fextended-ssl-baseline","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbillmeyer%2Fextended-ssl-baseline","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbillmeyer%2Fextended-ssl-baseline/lists"}