moby/docs/sources/articles
Lorenz Leutgeb a3d5f874c1 doc: Spice up generated CA
Use AES (the successor of DES) to encrypt private key. Further
reading:

 * http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-131A.pdf
 * https://ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices.pdf
   "3DES provides about 112 bits of security. This is below the
    recommended minimum of 128 bits, but it's still strong enough. A
    bigger practical problem is that 3DES is much slower than the
    alternatives. Thus, we don't recommend it for performance reasons,
    but it can be kept at the end of the cipher list for
    interoperability with very old clients."

 * http://csrc.nist.gov/publications/nistpubs/800-67-Rev1/SP-800-67-Rev1.pdf

Use SHA256 for our CA. This avoids accidental use of SHA1 or MD5 which
could be default values.

Signed-off-by: Lorenz Leutgeb <lorenz.leutgeb@gmail.com>
2015-01-04 21:45:06 +01:00
..
b2d_volume_images docs: shrink images 2014-09-15 14:46:29 +03:00
ambassador_pattern_linking.md Consistently use 'sudo docker' in examples 2014-09-16 11:49:05 +10:00
b2d_volume_resize.md fix cli dashes in boot2docker resizing article 2014-10-21 11:38:19 -05:00
baseimages.md add Scott's link checker script, and fix what it finds 2014-12-16 14:46:25 +10:00
basics.md add Scott's link checker script, and fix what it finds 2014-12-16 14:46:25 +10:00
certificates.md On Red Hat Registry Servers we return 404 on certification errors. 2014-10-20 13:20:48 -04:00
cfengine_process_management.md Consistently use 'sudo docker' in examples 2014-09-16 11:49:05 +10:00
chef.md add Scott's link checker script, and fix what it finds 2014-12-16 14:46:25 +10:00
dockerfile_best-practices.md Fix mkdir typo in dockerfile_best-practices.md. 2014-11-10 01:00:05 +01:00
dsc.md Replace get.docker.io -> get.docker.com and test.docker.io -> test.docker.com 2014-09-24 18:53:27 -04:00
host_integration.md doc: Update host integration article 2014-10-30 13:39:45 -05:00
https.md doc: Spice up generated CA 2015-01-04 21:45:06 +01:00
networking.md Update networking.md with new iptables behaviour 2014-12-21 12:57:32 +10:00
puppet.md add Scott's link checker script, and fix what it finds 2014-12-16 14:46:25 +10:00
registry_mirror.md Consistently use sudo docker 2014-11-17 17:14:39 -08:00
runmetrics.md Update runmetrics.md 2014-07-18 16:16:19 -05:00
security.md add Scott's link checker script, and fix what it finds 2014-12-16 14:46:25 +10:00
systemd.md Merge pull request #9558 from philips/fixup-typo-in-systemd-article 2014-12-09 23:10:17 +11:00
using_supervisord.md add Scott's link checker script, and fix what it finds 2014-12-16 14:46:25 +10:00