summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRomain Porte <microjoe@microjoe.org>2017-11-14 22:50:31 +0100
committerRomain Porte <microjoe@microjoe.org>2017-11-14 22:50:31 +0100
commit932929d7e9c98c289943f3301b996e4bfcb68603 (patch)
treeb8c1b4555b3f8e4e16f1f75a3a41c501aad2b10d
parent58a871e7edf82e7fa71d25d720ce4be96479cd75 (diff)
downloadMicroJoe.nginx-932929d7e9c98c289943f3301b996e4bfcb68603.tar.gz
MicroJoe.nginx-932929d7e9c98c289943f3301b996e4bfcb68603.zip
Stronger ciphers
-rw-r--r--files/ssl.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/files/ssl.conf b/files/ssl.conf
index 0cf7cc3..d5b4092 100644
--- a/files/ssl.conf
+++ b/files/ssl.conf
@@ -7,7 +7,7 @@ ssl_session_tickets off;
# modern configuration. tweak to your needs.
ssl_protocols TLSv1.2;
# ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256'; # 90 score SSL Labs
-ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL; # 100 score SSL Labs
+ssl_ciphers AES256+EECDH:!aNULL; # 100 score SSL Labs
ssl_prefer_server_ciphers on;