kung-fu-tzu/mini_httpd — pull request #1 by jdeblese (2013-08-28 13:00:58+00:00)
Title: SSL Fixes

This fixes two minor issues identified by ssllabs: the lack of an intermediate certificate chain, and the order of the cipher suite.

* Servers are not required to provide intermediate certificates, but providing them makes validation easier. Seeing as the certificate file is in PEM format, only a trivial change is required to read in the whole chain when available.

* Enforcing the server cipher priority together with a judicious choice of ciphers helps mitigate the BEAST attack, according to https://community.qualys.com/blogs/securitylabs/2011/10/17/mitigating-the-beast-attack-on-tls