| Index: modules/nginx/templates/nginx.conf.erb |
| =================================================================== |
| --- a/modules/nginx/templates/nginx.conf.erb |
| +++ b/modules/nginx/templates/nginx.conf.erb |
| @@ -34,19 +34,19 @@ http { |
| <% if scope.lookupvar('nginx::params::gzip') == 'on' %> |
| gzip on; |
| gzip_disable "msie6"; |
| gzip_min_length 100; |
| gzip_buffers 4 8k; |
| gzip_types text/plain text/xhtml text/css application/x-javascript text/xml application/atom+xml application/rss+xml; |
| <% end %> |
| - ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA256 EECDH+aRSA+RC4 EDH+aRSA EECDH RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"; |
| + ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA -3DES DES-CBC3-SHA !aNULL !eNULL !LOW !MD5 !EXP !PSK !SRP !DSS !RC4"; |
| ssl_prefer_server_ciphers on; |
| - ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |
| + ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; |
| <% if ssl_session_cache == 'on' %> |
| ssl_session_cache shared:SSL:1m; |
| <% else %> |
| ssl_session_cache off; |
| <% end %> |
| types_hash_max_size 2048; |