Weak SSL configuration at try.nextcloud.com

ℹ️ Support
1

SSL Labs rating “B” for try.nextcloud.com with no forward secrecy with reference browsers – really? Cross-checking SSL/TLS configuration is highly recommented!

nextcloud-weaky
nextcloud-weaky.png733×1254 124 KB

1 Like
2

Disclosing file path information on PHP or Zend errors is not a good idea:

Zend\Form\Exception\InvalidElementException

File:

/var/www/demo-appliance/demo-web/vendor/zendframework/zend-form/src/Fieldset.php:219

Message:

No element by the name of [company] found in form

Stack trace:

#0 /var/www/demo-appliance/demo-web/module/Application/view/application/user/index.phtml(53): Zend\Form\Fieldset->get(‘company’)
#1 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-view/src/Renderer/PhpRenderer.php(506): include(‘/var/www/demo-a…’)
#2 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-view/src/View.php(207): Zend\View\Renderer\PhpRenderer->render(NULL)
#3 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-view/src/View.php(236): Zend\View\View->render(Object(Zend\View\Model\ViewModel))
#4 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-view/src/View.php(200): Zend\View\View->renderChildren(Object(Zend\View\Model\ViewModel))
#5 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-mvc/src/View/Http/DefaultRenderingStrategy.php(105): Zend\View\View->render(Object(Zend\View\Model\ViewModel))
#6 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-eventmanager/src/EventManager.php(322): Zend\Mvc\View\Http\DefaultRenderingStrategy->render(Object(Zend\Mvc\MvcEvent))
#7 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-eventmanager/src/EventManager.php(171): Zend\EventManager\EventManager->triggerListeners(Object(Zend\Mvc\MvcEvent))
#8 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-mvc/src/Application.php(384): Zend\EventManager\EventManager->triggerEvent(Object(Zend\Mvc\MvcEvent))
#9 /var/www/demo-appliance/demo-web/vendor/zendframework/zend-mvc/src/Application.php(356): Zend\Mvc\Application->completeRequest(Object(Zend\Mvc\MvcEvent))
#10 /var/www/demo-appliance/demo-web/public/index.php(40): Zend\Mvc\Application->run()
#11 {main}

1 Like
3

The community does not run these instances. I forwarded this message to the website bugtracker, they will hopefully fix it soon:

Thanks for the notice.

1 Like