nginx/configure/tls128

This commit is contained in:
Marc Beninca 2019-08-04 21:10:04 +02:00
parent 05eee49b57
commit 188059c11e

View file

@ -39,7 +39,7 @@ Configure
# Security # Security
ssl_buffer_size 8k; ssl_buffer_size 8k;
ssl_ciphers "TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_AES_128_GCM_SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-CHACHA20-POLY1305,ECDHE-ARIA256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256"; ssl_ciphers "TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-CHACHA20-POLY1305,ECDHE-ARIA256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256";
ssl_ecdh_curve "X448:X25519:secp521r1:secp384r1"; ssl_ecdh_curve "X448:X25519:secp521r1:secp384r1";
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.3 TLSv1.2; ssl_protocols TLSv1.3 TLSv1.2;