zombi/proxy
11
1
Fork 0
Code Issues Pull requests Releases Wiki Activity

use ciphersuits per SSLlabs and BSI recommendations

Browse source
This commit is contained in:
cpp 2021-08-02 14:57:21 +02:00 committed by Hive
parent 11d5214a9d
commit a33c5f3088
1 changed files with 4 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
config/dynamic/tls.yml
View file

@ -3,9 +3,7 @@ tls:
default: default:
minVersion: VersionTLS12 minVersion: VersionTLS12
cipherSuites: cipherSuites:
- TLS_CHACHA20_POLY1305_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_AES_128_GCM_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384