Commit fd9e5aae authored by nimrod's avatar nimrod
Browse files

Yet another try at removing weak cipher suites.

parent c0a6db61

snippets/ssl-modern.conf

+1 −1
Original line number Diff line number Diff line 
# vim: ft=nginx

include                     snippets/ssl-common.conf;

ssl_protocols               TLSv1.2 TLSv1.3;

ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA:!SHA1:!kRSA:!DHE+SHA256:!ECDHE+SHA256;
 
ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA:!SHA1:!kRSA:!AES:AESCCM;