Add TLS v1.3 support (#11603)

Maintain TLS v1.2 compatibility (might want to drop this later) and add support for TLS v1.3
This commit is contained in:
ichi_i 2019-08-30 06:42:50 +01:00 committed by Eugen Rochko
parent f6e7f94146
commit 49f57b5534

2
dist/nginx.conf vendored
View file

@ -19,7 +19,7 @@ server {
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name example.com; server_name example.com;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA; ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;