Skip to content

Instantly share code, notes, and snippets.

@mcka1n
Created September 13, 2016 20:44
Show Gist options
  • Save mcka1n/cb70116e3505a6f3a8cd004a4612c29d to your computer and use it in GitHub Desktop.
Save mcka1n/cb70116e3505a6f3a8cd004a4612c29d to your computer and use it in GitHub Desktop.
customer.ssl_cipher
# customer.ssl_cipher
# /etc/nginx/servers/app-name-here/customer.ssl_cipher
# SSLv3 removed because of CVE-2014-3566 (POODLE - Padding Oracle On Downgraded Legacy Encryption)
ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment