Dear Developer, I am very happy to you an App like yours to keep my Password Secure.
My Database File is Keept on a secure Owncloud Server with WEBDAV, but to keep the App beeing able to open the Database File I had to disable some Security Features on the Server als listed below.
(Commented Lines are the ones that dosent work)
With the Settings Enabled the App keeps telling me Errors in Authentification with the Server.
Seems like it uses Old Ciphers or dosent Support Elyptic Curve Ciphers.
Thanks For Fixing
ssl_certificate /etc/letsencrypt/live/domain.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.de/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/domain.de/fullchain.pem;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off;
ssl_dhparam /etc/ssl/dhparam.pem;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
# ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
# ssl_ecdh_curve secp384r1;
ssl_stapling on;
ssl_stapling_verify on;
server_tokens off;
# add_header Strict-Transport-Security "max-age=15552000; includeSubDomains";
Comments: I assume this is fixed as no other reports appeared.
My Database File is Keept on a secure Owncloud Server with WEBDAV, but to keep the App beeing able to open the Database File I had to disable some Security Features on the Server als listed below.
(Commented Lines are the ones that dosent work)
With the Settings Enabled the App keeps telling me Errors in Authentification with the Server.
Seems like it uses Old Ciphers or dosent Support Elyptic Curve Ciphers.
Thanks For Fixing
ssl_certificate /etc/letsencrypt/live/domain.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.de/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/domain.de/fullchain.pem;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off;
ssl_dhparam /etc/ssl/dhparam.pem;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
# ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
# ssl_ecdh_curve secp384r1;
ssl_stapling on;
ssl_stapling_verify on;
server_tokens off;
# add_header Strict-Transport-Security "max-age=15552000; includeSubDomains";
Comments: I assume this is fixed as no other reports appeared.