From bed74e0aaee53444570e6b1b6d6786ddc5340f55 Mon Sep 17 00:00:00 2001 From: Tommy Date: Wed, 12 Apr 2023 07:25:51 -0400 Subject: [PATCH] Change back to swag's ciphersuite --- swag/nginx/ssl.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/swag/nginx/ssl.conf b/swag/nginx/ssl.conf index 7d0ebc2..0777bd2 100644 --- a/swag/nginx/ssl.conf +++ b/swag/nginx/ssl.conf @@ -15,7 +15,7 @@ ssl_dhparam /config/nginx/dhparams.pem; # intermediate configuration ssl_protocols TLSv1.2 TLSv1.3; -ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256; +ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers on; ssl_conf_command Options PrioritizeChaCha;