From 4f5fc586293acded7af7da0366fbb39813175f79 Mon Sep 17 00:00:00 2001 From: rhy-jot Date: Wed, 7 May 2014 15:10:12 -0700 Subject: [PATCH] Update cipher list http://blog.cloudflare.com/killing-rc4-the-long-goodbye --- plugins/nginx-vhosts/install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/nginx-vhosts/install b/plugins/nginx-vhosts/install index c7156477f..bcbc1f063 100755 --- a/plugins/nginx-vhosts/install +++ b/plugins/nginx-vhosts/install @@ -22,7 +22,7 @@ include $DOKKU_ROOT/*/nginx.conf; ssl_session_cache shared:SSL:20m; ssl_session_timeout 10m; -ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!CAMELLIA; +ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_prefer_server_ciphers on;