1
0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 15:42:48 -05:00

allow configurable ssl protocols and ciphersuites

This commit is contained in:
Kyle Spearrin
2018-08-31 12:11:44 -04:00
parent d43d0f1446
commit d4c35a98b7
3 changed files with 33 additions and 8 deletions

View File

@ -28,9 +28,7 @@ server {
ssl_dhparam {{{DiffieHellmanPath}}};
{{/if}}
# SSL protocol TLSv1.2 is allowed. Disabled SSLv3, TLSv1, and TLSv1.1
ssl_protocols TLSv1.2;
# Enable most secure cipher suites only.
ssl_protocols {{{SslProtocols}}};
ssl_ciphers "{{{SslCiphers}}}";
# Enables server-side protection from BEAST attacks
ssl_prefer_server_ciphers on;