From d1a42ae039449353c8762367ff03f53b70bd73a9 Mon Sep 17 00:00:00 2001 From: Marc Beninca Date: Mon, 5 Aug 2019 09:49:37 +0200 Subject: [PATCH] nginx/configure/ciphers --- in/public/web/nginx/configure.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/in/public/web/nginx/configure.rst b/in/public/web/nginx/configure.rst index f4df637..7decdfe 100644 --- a/in/public/web/nginx/configure.rst +++ b/in/public/web/nginx/configure.rst @@ -39,7 +39,7 @@ Configure # Security ssl_buffer_size 8k; - ssl_ciphers "TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-CHACHA20-POLY1305,ECDHE-ARIA256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256"; + ssl_ciphers "TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ARIA256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ARIA128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256"; ssl_ecdh_curve "X448:X25519:secp521r1:secp384r1"; ssl_prefer_server_ciphers on; ssl_protocols TLSv1.3 TLSv1.2;