Apache disable TLS_RSA_WITH_3DES_EDE_CBC_SHA after LetsEncrypt

written by Andrew Shay on 2017-05-09

This guide is for Apache but might be similar for other web servers

If you've just installed Let's Encrypt certificates with Certbot on your web server and ran SSL Server Test, you might have warning saying your server supports TLS_RSA_WITH_3DES_EDE_CBC_SHA.

To drop support for this protocol you must

  • Open /etc/letsencrypt/options-ssl-apache.conf
  • Delete :DES-CBC3-SHA from the SSLCipherSuite line.
  • Restart apache sudo service apache2 restart

Also, here is the default conf file
https://github.com/certbot/certbot/blob/master/certbot-apache/certbot_apache/options-ssl-apache.conf


Subreddit Monitor supports multiple subreddits

written by Andrew Shay on 2017-02-25

Subreddit monitor now supports multiple subreddits via a JSON file
View on GitHub


Subreddit Monitor

written by Andrew Shay on 2016-12-22

I created a really simple script that parses the RSS of a subreddit and prints a message when a new thread is posted (checking every 5 minutes).
This was just a script to test this functionality that will be integrated into a larger project.
https://github.com/Andrew-Shay/subreddit-monitor


Blog built with Lektor

written by Andrew Shay on 2016-11-16

My blog has been rebuilt and is now generated with Lektor!
Get Lektor!


Pretty Print JSON v2.0.3

written by Andrew Shay on 2016-11-15

Pretty Print JSON has been updated to v2.0.3.
The usage has been simplified and it is now a universal bdist wheel.
pip install pretty_print_json