overencrypt
v1.0.0
Published
Audit and recommend security changes to your LetsEncrypt SSL/TLS configuration
Downloads
3
Maintainers
Readme
OverEncrypt
How to protect your Apache or Nginx site with HTTPS, LetsEncrypt, and OverEncrypt:
- Register your TLS certificate with LetsEncrypt
- Verify that your website is available over HTTPS.
- Download this repo and run
npm install overencrypt -g
- Run on your server:
overencrypt --apache /path/to/conf
oroverencrypt --nginx /path/to/conf
- Follow recommendations
- Re-run SSL Test and get a better score!
What does OverEncrypt do?
This extends the LetsEncrypt defaults by recommending:
- Strict Transport Security
- HSTS Preloading
- Public Key Pinning
- OCSP Stapling
- Preferring AES-256 to AES-128
OverEncrypt doesn't make the changes by itself! You'll also need to make additional config changes if you didn't give LetsEncrypt sudo access when you ran the installer.
Future:
- Support post-quantum Ring Learning With Errors / A New Hope protocol
- Certificate transparency
Dependencies
NodeJS - I initially started in Python, but for some reason none of the Python parsers would work on my LetsEncrypt Nginx config.
License
Open source, MIT license