|
|
@ -58,7 +58,10 @@ ssl = yes
|
|
|
|
ssl_cert = </certs/cert.pem
|
|
|
|
ssl_cert = </certs/cert.pem
|
|
|
|
ssl_key = </certs/key.pem
|
|
|
|
ssl_key = </certs/key.pem
|
|
|
|
ssl_protocols=!SSLv3 !SSLv2
|
|
|
|
ssl_protocols=!SSLv3 !SSLv2
|
|
|
|
ssl_cipher_list=TLSv1+HIGH !SSLv2 !RC4 !aNULL !eNULL !3DES @STRENGTH
|
|
|
|
ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA
|
|
|
|
|
|
|
|
ssl_prefer_server_ciphers = yes
|
|
|
|
|
|
|
|
ssl_dh_parameters_length = 2048
|
|
|
|
|
|
|
|
ssl_options = no_compression
|
|
|
|
|
|
|
|
|
|
|
|
###############
|
|
|
|
###############
|
|
|
|
# Authentication
|
|
|
|
# Authentication
|
|
|
|