Skip to content

Commit 3f04c7e

Browse files
author
Till Brehm
committed
Add SSL cipher suite to nginx vhost. fixes issue #3983
1 parent cdc82bb commit 3f04c7e

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

server/conf/nginx_vhost.conf.master

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ server {
77
<tmpl_if name='ssl_enabled'>
88
listen <tmpl_var name='ip_address'>:<tmpl_var name='https_port'> ssl{tmpl_if name='enable_http2' op='==' value='y'} http2{/tmpl_if}{tmpl_if name='enable_spdy' op='==' value='y'} spdy{/tmpl_if};
99
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
10+
ssl_ciphers EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:!MD5:!RC4:!LOW:!MEDIUM:!CAMELLIA:!ECDSA:!DES:!DSS:!3DES:!NULL;
1011
<tmpl_if name='ipv6_enabled'>
1112
listen [<tmpl_var name='ipv6_address'>]:<tmpl_var name='https_port'> ssl{tmpl_if name='enable_http2' op='==' value='y'} http2{/tmpl_if}{tmpl_if name='enable_spdy' op='==' value='y'} spdy{/tmpl_if};
1213
</tmpl_if>

0 commit comments

Comments
 (0)