Merge pull request #288 from gene1wood/expand_on_JSON_readme

Expand the JSON README
This commit is contained in:
Gene Wood 2023-05-08 13:27:33 -07:00 коммит произвёл GitHub
Родитель 1aaa74ddc6 049c9c03da
Коммит 4287c89a9b
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
1 изменённых файлов: 13 добавлений и 14 удалений

Просмотреть файл

@ -1,19 +1,18 @@
# JSON Versions of Server Side TLS Recommendations
# Current JSON Server Side TLS Recommendations
The JSON recommendations are tracked in GitHub and hosted in AWS CloudFront in
the `infosec-prod` AWS account. CloudFront terminates the TLS connection and
sources the data from the `server-side-tls` AWS S3 bucket also hosted in the
`infosec-prod` AWS account.
The current JSON recommendations can be found at https://github.com/mozilla/ssl-config-generator/tree/master/docs/guidelines
# Deployment method
# Historical JSON Versions of Server Side TLS Recommendations
To deploy the JSON recommendations after they have been updated in the repo,
run the following command with a user or role with sufficient permissions to
write to the `server-side-tls` bucket in infosec-prod
The `/json` directory in this repo contains the JSON recommendations up to version
5.0 from 2019.
```
aws s3 cp server-side-tls-conf.json s3://server-side-tls/
aws s3 cp server-side-tls-conf-5.0.json s3://server-side-tls/
```
These historical JSON recommendations are tracked in GitHub and hosted in the
`server-side-tls` AWS S3 bucket hosted in the`infosec-prod` AWS account. That
S3 bucket is then fronted by AWS CloudFront, also in the `infosec-prod` AWS
account. The CloudFront distribution `EIB8EDBWWFDDU ` terminates the TLS
connection at https://statics.tls.security.mozilla.org serving up the content
from the S3 bucket.
Or upload the updated files through the AWS web console.
All future recommendation updates should be made in the https://github.com/mozilla/ssl-config-generator/
repository, not here.