2
0
mirror of https://github.com/frappe/bench.git synced 2024-11-13 16:56:33 +00:00

remove SSLv3 #poodle

This commit is contained in:
Pratik Vyas 2014-11-26 00:18:15 +05:30
parent 17f7aa0b72
commit 235e8508fe

View File

@ -63,7 +63,7 @@ upstream frappe {
ssl_certificate {{ site.ssl_certificate }};
ssl_certificate_key {{ site.ssl_certificate_key }};
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
ssl_prefer_server_ciphers on;