paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-13 18:36:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

nginx: Disable RC4 and prefer server cipher order.

Browse Source
This commit is contained in:
Alex Gaynor
2016-07-09 12:54:14 -04:00
committed by Tim Abbott
parent c671881713
commit ee47da8790
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
puppet/zulip/files/nginx/nginx.conf
View File

@@ -47,9 +47,10 @@ http {
default upgrade; default upgrade;
'' close; '' close;
} }
# These are the official ciphers as of 2014-10-14
ssl_prefer_server_ciphers On;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:EECDH+RC4:RSA+RC4:!MD5; ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
include /etc/nginx/conf.d/*.conf; include /etc/nginx/conf.d/*.conf;