diff options
| author | Artik Banana <lid@tuta.io> | 2018-06-11 23:01:14 +0000 |
|---|---|---|
| committer | Artik Banana <lid@tuta.io> | 2018-06-11 23:01:14 +0000 |
| commit | 93c614bf136752a212a242fef6066bc30ce4b6ad (patch) | |
| tree | 9742b8487b44ad936d1a6d47432cab2c5f89d5eb | |
| parent | c645a8de2bf3e112b19d533a621944495d80a27b (diff) | |
| download | pleroma-93c614bf136752a212a242fef6066bc30ce4b6ad.tar.gz pleroma-93c614bf136752a212a242fef6066bc30ce4b6ad.zip | |
* Removed TLSv1 and TLSv1.1
* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves
| -rw-r--r-- | installation/pleroma.nginx | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/installation/pleroma.nginx b/installation/pleroma.nginx index 3cbb675b3..a0a2d9f51 100644 --- a/installation/pleroma.nginx +++ b/installation/pleroma.nginx @@ -36,6 +36,7 @@ server { ssl_certificate /etc/letsencrypt/live/example.tld/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/example.tld/privkey.pem; + # Add TLSv1.0 to support older devices ssl_protocols TLSv1.2; # Uncomment line below if you want to support older devices (Before Android 4.4.2, IE 8, etc.) # ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES"; |