Skip to content

Commit 70a8f75

Browse files
Update SSL Ciphers
To fix RC4 immediate deprecation by major web browsers. Using old configuration results in "Insecure Certificate" errors. Strong Ciphers via CloudFlare (https://github.com/cloudflare/sslconfig/blob/master/conf). Excluded CloudFlare's use of ChaCha cipher due to compatibility patch required. Info Source: https://tools.ietf.org/html/rfc7465 https://www.pcicomplianceguide.org/pci-dss-v3-1-and-ssl-what-you-should-do-now/ https://blog.digicert.com/major-browsers-announce-rc4-deprecation/
1 parent 8976066 commit 70a8f75

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/rpm/conf/nginx.conf

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,8 @@ http {
3737

3838

3939
# SSL PCI Compliance
40-
ssl_ciphers RC4:HIGH:!aNULL:!MD5:!kEDH;
40+
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
41+
ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
4142
ssl_session_cache shared:SSL:10m;
4243
ssl_prefer_server_ciphers on;
4344

0 commit comments

Comments
 (0)