tree 52434fe53be62969278ab5aaed901162348b3548
parent 671a717d738ac1a94f0f34cc3bf13d2618474d9e
author Ed Tanous <ed.tanous@intel.com> 1547591288 -0800
committer Ed Tanous <ed@tanous.net> 1548217249 -0800

bmcweb: update SSL cipher suites to OWASP compatB

Previously, bmcweb was utilitizing the "mozilla compatibility" cipher
suites.  This is overly lenient on broken ciphers and can cause some
issues with security reviews.  In researching this, it looks like we
never actually documented that we follow Mozilla ciphers, aside from the
statement "The OpenBMC webserver shall follow the latest OWASP recommendations for
  authentication, session management, and security."  Considering that
we're moving _to_ OWASP recommendations, this commit is simply making us
follow the advice we already document, although this commit also updates
the documentation to be more clear.

Tested By:
Loaded on a BMC, opened web page in browser, and observed phosphor-webui
loaded correctly.

Change-Id: I912b35d378ce955c1472b2d54f1a365f6efea160
Signed-off-by: Ed Tanous <ed.tanous@intel.com>