A new project has produced a large and growing list of the private SSL keys that are hard-coded into many embedded devices, such as consumer home routers. The LittleBlackBox Project comprises a list of more than 2,000 private keys right now, each of which can be associated with the public key of a given router, making it a simple matter for an attacker to decrypt the traffic passing through the device.
There are many wordy articles on configuring your web server’s SSL ciphers. This is not one of them. Instead I will share a configuration which is both compatible enough for today’s needs and scores a straight “A†on Qualys’s SSL Server Test.
multiple ssl auf einer ip ist ja nix neues, hier aber sorgt gnutls dafür, dass man auch verschiedene certs nehmen kann
