ssl.conf 426 B

123456789
  1. ssl_session_cache shared:SSL:10m;
  2. ssl_session_timeout 10m;
  3. ssl_session_tickets off;
  4. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  5. ssl_prefer_server_ciphers on;
  6. ssl_ciphers 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA';
  7. ssl_dhparam /etc/nginx/ssl/dhparam.pem;
  8. ssl_ecdh_curve secp384r1;