{"id":19891341,"url":"https://github.com/lightbend/ssl-config","last_synced_at":"2025-04-12T23:41:46.764Z","repository":{"id":3005905,"uuid":"41922599","full_name":"lightbend/ssl-config","owner":"lightbend","description":"SSL configuration logic, extracted from Play's WS (for use in Akka et al).","archived":false,"fork":false,"pushed_at":"2024-08-12T23:15:02.000Z","size":8074,"stargazers_count":67,"open_issues_count":43,"forks_count":38,"subscribers_count":13,"default_branch":"main","last_synced_at":"2025-04-04T02:51:12.510Z","etag":null,"topics":["akka","akka-http","ssl","tls"],"latest_commit_sha":null,"homepage":"https://lightbend.github.io/ssl-config/","language":"Scala","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lightbend.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-09-04T15:15:23.000Z","updated_at":"2024-10-19T11:09:53.000Z","dependencies_parsed_at":"2024-12-21T10:11:21.957Z","dependency_job_id":null,"html_url":"https://github.com/lightbend/ssl-config","commit_stats":{"total_commits":365,"total_committers":27,"mean_commits":"13.518518518518519","dds":0.6657534246575343,"last_synced_commit":"bee61d85b0848e5c4db12c1d624c128913fac748"},"previous_names":["typesafehub/ssl-config"],"tags_count":25,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lightbend%2Fssl-config","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lightbend%2Fssl-config/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lightbend%2Fssl-config/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lightbend%2Fssl-config/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lightbend","download_url":"https://codeload.github.com/lightbend/ssl-config/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248647256,"owners_count":21139081,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["akka","akka-http","ssl","tls"],"created_at":"2024-11-12T18:17:55.433Z","updated_at":"2025-04-12T23:41:46.730Z","avatar_url":"https://github.com/lightbend.png","language":"Scala","funding_links":[],"categories":[],"sub_categories":[],"readme":"# SSL Config\n\n[![Build Status](https://travis-ci.com/lightbend/ssl-config.svg?branch=main)](https://travis-ci.com/lightbend/ssl-config) ![Maven metadata URL](https://img.shields.io/maven-metadata/v/http/central.maven.org/maven2/com/typesafe/ssl-config-core_2.13/maven-metadata.xml.svg)\n\nGoal and purpose of this library is to make [Play WS][] library as well as Akka HTTP \"secure by default\".\nSadly, while Java's security has been steadily improving some settings are still left up to the user,\nand certain algorithms which should never be used in a serious production system are still accepted by\nthe default settings of the SSL/TLS infrastructure. These things are possible to fix, by providing specialized\nimplementations and/or defining additional settings for the Java runtime to use – this is exactly the purpose of SSL Config.\n\nAdditional modules offer integration with Play WS (which by default utilises [Async Http Client][]),\nAkka Http and any other library which may need support from this library.\n\n## Versions\n\nThe project is maintained on two branches:\n\n- [`main`](https://github.com/lightbend/ssl-config/tree/main) which requires Java 8 and is used by Akka `2.5.x` and later.\n- [`release-0.1`](https://github.com/lightbend/ssl-config/tree/release-0.1) which is Java 6 compatible\n  (does lots of manual improvements and checks that JDK6 didn't).\n  Currently only the *legacy version* of Akka Streams \u0026 Http (which is `2.0.x`) uses this version.\n\n## State of this project\n\nssl-config at this point in time is used primarily internally in Akka HTTP, and is being evolved\ntowards being \"the place\" one configures all possible SSL/TLS related settings, mostly focused on\nthe client side of things.\n\nThe project is hosted externally of either Akka or Play, in order to foster convergence and re-use\nof the more tricky bits of configuring TLS.\n\nBinary compatibility is **not guaranteed** between versions (in the `0.x.z` series) of ssl-config at this point in time.\nWe aim to stabilise the APIs and provide a stable release eventually.\n\n## Documentation\n\nDocs are available on: \u003chttps://lightbend.github.io/ssl-config\u003e\n\n## Recommended reading\n\nAn excellent series by [Will Sargent](https://github.com/wsargent) about making\n[Play WS][] (from which this library originates) \"secure by default\":\n\n- [Fixing the Most Dangerous Code in the World](https://tersesystems.com/blog/2014/01/13/fixing-the-most-dangerous-code-in-the-world/)\n- [Fixing X.509 Certificates](https://tersesystems.com/blog/2014/03/20/fixing-x509-certificates/)\n- [Fixing Certificate Revocation](https://tersesystems.com/blog/2014/03/22/fixing-certificate-revocation/)\n- [Fixing Hostname Verification](https://tersesystems.com/blog/2014/03/23/fixing-hostname-verification/)\n- [Testing Hostname Verification](https://tersesystems.com/blog/2014/03/31/testing-hostname-verification)\n\n## License\n\nLightbend 2015-2020, Apache 2.0\n\n[Async Http Client]: https://github.com/AsyncHttpClient/async-http-client/\n[Play WS]: https://www.playframework.com/documentation/latest/ScalaWS\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flightbend%2Fssl-config","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flightbend%2Fssl-config","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flightbend%2Fssl-config/lists"}