github/dokku
0
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #3352 from dokku/3343-ssl-enhancements

Browse Source 
Increase security of default SSL setup
This commit is contained in:
Jose Diaz-Gonzalez
2018-12-27 15:10:04 -05:00
committed by GitHub
parent af742f70c6 ba8037b4bd
commit 54990ebf83
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
plugins/nginx-vhosts/install
View File

@@ -30,7 +30,7 @@ chmod 0440 /etc/sudoers.d/dokku-nginx
# if dhparam.pem has not been created, create it the first time
if [[ ! -f /etc/nginx/dhparam.pem ]]; then
openssl dhparam -out /etc/nginx/dhparam.pem 2048
openssl dhparam -out /etc/nginx/dhparam.pem 4096
chown root:root /etc/nginx/dhparam.pem
fi
@@ -47,7 +47,7 @@ ssl_session_timeout 1d;
ssl_session_tickets on;
ssl_dhparam /etc/nginx/dhparam.pem;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
EOF