Commit c2b0a5a5 authored by nimrod's avatar nimrod
Browse files

Remove RSA key exchange from the modern SSL config. 

SSL Labs' test complains that it doesn't offer forward secrecy.
parent af2a0e8e

snippets/ssl-modern.conf

+1 −1
Original line number Diff line number Diff line 
# vim: ft=nginx

include                     snippets/ssl-common.conf;

ssl_protocols               TLSv1.2 TLSv1.3;

ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1;
 
ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1:!kRSA;