github/dokku
0
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix: disable ssl tickets

Browse Source 
This makes Perfect Forward Secrecy useless.
This commit is contained in:
Jose Diaz-Gonzalez
2017-04-20 20:17:43 -06:00
committed by GitHub
parent 1c5896c3e3
commit 9e021f889f
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
plugins/nginx-vhosts/install
View File

@@ -36,6 +36,7 @@ server_tokens off;
# Settings from https://mozilla.github.io/server-side-tls/ssl-config-generator/
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 1d;
ssl_session_tickets on;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS;