mirror of
				https://github.com/zulip/zulip.git
				synced 2025-11-03 21:43:21 +00:00 
			
		
		
		
	nginx: Disable RC4 and prefer server cipher order.
This commit is contained in:
		@@ -47,9 +47,10 @@ http {
 | 
			
		||||
        default upgrade;
 | 
			
		||||
        ''      close;
 | 
			
		||||
    }
 | 
			
		||||
    # These are the official ciphers as of 2014-10-14
 | 
			
		||||
 | 
			
		||||
    ssl_prefer_server_ciphers On;
 | 
			
		||||
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 | 
			
		||||
    ssl_ciphers  EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:EECDH+RC4:RSA+RC4:!MD5;
 | 
			
		||||
    ssl_ciphers  EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    include /etc/nginx/conf.d/*.conf;
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user