From adbe99cb6536ee3c9256ba26d89cd7d7a3e1afab Mon Sep 17 00:00:00 2001 From: Nick Sergeant Date: Mon, 6 Apr 2015 22:45:00 -0400 Subject: [PATCH] Moar SSL. --- salt/application/snipt.nginx.conf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/salt/application/snipt.nginx.conf b/salt/application/snipt.nginx.conf index 5b62f3c..2c58a30 100644 --- a/salt/application/snipt.nginx.conf +++ b/salt/application/snipt.nginx.conf @@ -23,6 +23,8 @@ upstream backend_snipt { ssl on; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_prefer_server_ciphers on; + ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"; ssl_certificate /etc/certs/{{ pillar.hostname }}.crt; ssl_certificate_key /etc/certs/{{ pillar.hostname }}.key; @@ -34,6 +36,8 @@ upstream backend_snipt { ssl on; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_prefer_server_ciphers on; + ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"; ssl_certificate /etc/certs/{{ pillar.hostname }}.crt; ssl_certificate_key /etc/certs/{{ pillar.hostname }}.key;