From e55fc771c9bd387a4469dc15dbfb8c51944f24eb Mon Sep 17 00:00:00 2001 From: Franck Nijhof Date: Tue, 17 Aug 2021 21:55:38 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=91=20Update=20NGINX=20SSL=20parameter?= =?UTF-8?q?s=20(#160)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- mopidy/rootfs/etc/nginx/includes/ssl_params.conf | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/mopidy/rootfs/etc/nginx/includes/ssl_params.conf b/mopidy/rootfs/etc/nginx/includes/ssl_params.conf index 7aedf05..e6789cb 100644 --- a/mopidy/rootfs/etc/nginx/includes/ssl_params.conf +++ b/mopidy/rootfs/etc/nginx/includes/ssl_params.conf @@ -1,9 +1,8 @@ -ssl_protocols TLSv1.2; -ssl_prefer_server_ciphers on; -ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA; -ssl_ecdh_curve secp384r1; +ssl_protocols TLSv1.2 TLSv1.3; +ssl_prefer_server_ciphers off; +ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_session_timeout 10m; ssl_session_cache shared:SSL:10m; ssl_session_tickets off; ssl_stapling on; -ssl_stapling_verify on; \ No newline at end of file +ssl_stapling_verify on;