r3-config/nginx/ssl/ssl.conf

9 lines
343 B
Plaintext

ssl_certificate ssl/cybafelo.com.crt;
ssl_certificate_key ssl/cybafelo.com.key;
ssl_session_timeout 5m;
## Don't use SSL v3 because of POODLE vulnerability
# ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
ssl_prefer_server_ciphers on;