nginx: Disable RC4 and prefer server cipher order.

This commit is contained in:
Alex Gaynor
2016-07-09 12:54:14 -04:00
committed by Tim Abbott
parent c671881713
commit ee47da8790

View File

@@ -47,9 +47,10 @@ http {
default upgrade;
'' close;
}
# These are the official ciphers as of 2014-10-14
ssl_prefer_server_ciphers On;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:EECDH+RC4:RSA+RC4:!MD5;
ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
include /etc/nginx/conf.d/*.conf;