From 938575a679124c5a5fdf4c41341bb6078e1c1b4a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?wxcaf=C3=A9?= Date: Thu, 27 Apr 2017 22:15:37 +0200 Subject: [PATCH] Revert "Avoid hard-coding ciphers into configuration (#122)" (#170) This reverts commit fc79d23ad0fa379b87f360625a8254e585a6bb08. --- Running-Mastodon/Production-guide.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Running-Mastodon/Production-guide.md b/Running-Mastodon/Production-guide.md index 35181c85..073c7ae1 100644 --- a/Running-Mastodon/Production-guide.md +++ b/Running-Mastodon/Production-guide.md @@ -35,7 +35,8 @@ server { server_name example.com; ssl_protocols TLSv1.2; - ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA1; + ssl_ciphers EECDH+AESGCM:EECDH+AES; + ssl_ecdh_curve prime256v1; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m;