diff options
| author | Mads Jensen <mje@inducks.org> | 2022-03-29 03:26:06 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-03-29 03:26:06 +0300 |
| commit | 142fcad28b0e61f335b92a743b38c8d677bd00dd (patch) | |
| tree | 02b9f033ff74d18d4bc6050770cb44a4cde28725 | |
| parent | 1d45939cab3ccf5a4849e9cdde50c329a8042cd6 (diff) | |
Update various references to draft RFC to published versions. (#9250)
| -rw-r--r-- | acme/acme/__init__.py | 2 | ||||
| -rw-r--r-- | acme/acme/client.py | 2 | ||||
| -rw-r--r-- | acme/acme/messages.py | 2 | ||||
| -rw-r--r-- | certbot/docs/ciphers.rst | 13 |
4 files changed, 12 insertions, 7 deletions
diff --git a/acme/acme/__init__.py b/acme/acme/__init__.py index 8b6ce88c0..1e21b5896 100644 --- a/acme/acme/__init__.py +++ b/acme/acme/__init__.py @@ -2,7 +2,7 @@ This module is an implementation of the `ACME protocol`_. -.. _`ACME protocol`: https://ietf-wg-acme.github.io/acme +.. _`ACME protocol`: https://datatracker.ietf.org/doc/html/rfc8555 """ import sys diff --git a/acme/acme/client.py b/acme/acme/client.py index f5cfa30c6..b5021b447 100644 --- a/acme/acme/client.py +++ b/acme/acme/client.py @@ -1104,7 +1104,7 @@ class ClientNetwork: is ignored, but logged. :raises .messages.Error: If server response body - carries HTTP Problem (draft-ietf-appsawg-http-problem-00). + carries HTTP Problem (https://datatracker.ietf.org/doc/html/rfc7807). :raises .ClientError: In case of other networking errors. """ diff --git a/acme/acme/messages.py b/acme/acme/messages.py index 299da68d7..286178d63 100644 --- a/acme/acme/messages.py +++ b/acme/acme/messages.py @@ -82,7 +82,7 @@ def is_acme_error(err: BaseException) -> bool: class Error(jose.JSONObjectWithFields, errors.Error): """ACME error. - https://tools.ietf.org/html/draft-ietf-appsawg-http-problem-00 + https://datatracker.ietf.org/doc/html/rfc7807 :ivar str typ: :ivar str title: diff --git a/certbot/docs/ciphers.rst b/certbot/docs/ciphers.rst index b4ef5902a..883d62090 100644 --- a/certbot/docs/ciphers.rst +++ b/certbot/docs/ciphers.rst @@ -188,12 +188,17 @@ BetterCrypto.org, a collaboration of mostly European IT security experts, has pu https://bettercrypto.org/ -FF-DHE Internet-Draft -~~~~~~~~~~~~~~~~~~~~~ +RFC 7919 +~~~~~~~~ -Gillmor's Internet-Draft "Negotiated Discrete Log Diffie-Hellman Ephemeral Parameters for TLS" is being developed at the IETF TLS WG. It advocates using *standardized* DH groups in all cases, not individually-chosen ones (mostly because of the Triple Handshake attack which can involve maliciously choosing invalid DH groups). The draft provides a list of recommended groups, with primes beginning at 2048 bits and going up from there. It also has a new protocol mechanism for agreeing to use these groups, with the possibility of backwards compatibility (and use of weaker DH groups) for older clients and servers that don't know about this mechanism. +IETF has published a document, RFC 7919, "Negotiated Discrete Log Diffie-Hellman Ephemeral Parameters for TLS". +It advocates using *standardized* DH groups in all cases, not individually-chosen ones (mostly because of the Triple +Handshake attack which can involve maliciously choosing invalid DH groups). The RFC provides a list of recommended +groups, with primes beginning at 2048 bits and going up from there. It also has a new protocol mechanism for agreeing +to use these groups, with the possibility of backwards compatibility (and use of weaker DH groups) for older clients +and servers that don't know about this mechanism. -https://tools.ietf.org/html/draft-ietf-tls-negotiated-ff-dhe-10 +https://datatracker.ietf.org/doc/html/rfc7919 Mozilla ~~~~~~~ |