From 955f95e899014b5aef87d5409160bf654ba1cac3 Mon Sep 17 00:00:00 2001 From: Vincent Fretin Date: Tue, 3 Feb 2015 09:52:18 +0100 Subject: [PATCH] enable ssl_prefer_server_ciphers Since we create /etc/nginx/nginx.conf we don't have "ssl_prefer_server_ciphers on" option enabled anymore, enable it in dokku.conf --- plugins/nginx-vhosts/install | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/plugins/nginx-vhosts/install b/plugins/nginx-vhosts/install index a2dfc49d6..29ac86ee2 100755 --- a/plugins/nginx-vhosts/install +++ b/plugins/nginx-vhosts/install @@ -25,9 +25,7 @@ ssl_session_timeout 10m; ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; -# this is already defined in the base nginx.conf and causes nginx reloads/starts to fail -# when its defined twice -# ssl_prefer_server_ciphers on; +ssl_prefer_server_ciphers on; # ssl_certificate $DOKKU_ROOT/tls/server.crt; # ssl_certificate_key $DOKKU_ROOT/tls/server.key;