2017-04-03 19:00:56 +02:00
|
|
|
ssl_certificate ssl/cybafelo.com.crt;
|
|
|
|
|
ssl_certificate_key ssl/cybafelo.com.key;
|
2017-03-21 11:07:09 +01:00
|
|
|
ssl_session_timeout 5m;
|
2017-03-22 12:05:57 +01:00
|
|
|
## Don't use SSL v3 because of POODLE vulnerability
|
|
|
|
|
# ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
|
|
|
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
2017-03-21 11:07:09 +01:00
|
|
|
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
|
|
|
|
|
ssl_prefer_server_ciphers on;
|
