nginx/configure/ciphersuites

This commit is contained in:
Marc Beninca 2019-08-05 10:44:15 +02:00
parent dc2f74aecd
commit c2ea9032c0

View file

@ -39,7 +39,7 @@ Configure
# Security # Security
ssl_buffer_size 8k; ssl_buffer_size 8k;
ssl_ciphers "TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ARIA256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ARIA128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256"; ssl_ciphers "ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ARIA256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ARIA128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256";
ssl_ecdh_curve "X448:X25519:secp521r1:secp384r1"; ssl_ecdh_curve "X448:X25519:secp521r1:secp384r1";
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.3 TLSv1.2; ssl_protocols TLSv1.3 TLSv1.2;