From f15053e70cd0a2a79b6b244e365e95afcd03336a Mon Sep 17 00:00:00 2001 From: packetcat Date: Sun, 14 Aug 2022 17:36:52 -0400 Subject: [PATCH] turn off cipher selection in elaine.asininetech.net.yml --- ubuntu/elaine.asininetech.net.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ubuntu/elaine.asininetech.net.yml b/ubuntu/elaine.asininetech.net.yml index 9bb2929..fdc06f0 100644 --- a/ubuntu/elaine.asininetech.net.yml +++ b/ubuntu/elaine.asininetech.net.yml @@ -41,7 +41,7 @@ ssl: - ssl_protocols TLSv1.2 TLSv1.3 - ssl_prefer_server_ciphers on - - ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256' + #- ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256' - ssl_session_timeout 1d - ssl_session_cache shared:SSL:50m - ssl_session_tickets off