Skip to content
Snippets Groups Projects
Commit 93c614bf authored by ArtikBanana's avatar ArtikBanana
Browse files

* Removed TLSv1 and TLSv1.1

* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves
parent c645a8de
Branches
No related tags found
No related merge requests found
......@@ -36,6 +36,7 @@ server {
ssl_certificate /etc/letsencrypt/live/example.tld/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.tld/privkey.pem;
# Add TLSv1.0 to support older devices
ssl_protocols TLSv1.2;
# Uncomment line below if you want to support older devices (Before Android 4.4.2, IE 8, etc.)
# ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment