From 670d59ddd48312024d1f01e06d8889f87e0ea222 Mon Sep 17 00:00:00 2001
From: Adar Nimrod <nimrod@shore.co.il>
Date: Sat, 7 May 2022 13:12:27 +0300
Subject: [PATCH] Remove some cihper suites.

Marked as weak in SSL Labs' test.
---
 snippets/ssl-modern.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/snippets/ssl-modern.conf b/snippets/ssl-modern.conf
index 3b4adf0..ac45af1 100644
--- a/snippets/ssl-modern.conf
+++ b/snippets/ssl-modern.conf
@@ -1,4 +1,4 @@
 # vim: ft=nginx
 include                     snippets/ssl-common.conf;
 ssl_protocols               TLSv1.2 TLSv1.3;
-ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1:!kRSA;
+ssl_ciphers                 CHACHA20:DHE:ECDHE:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1:!kRSA;
-- 
GitLab