Re: SSL Cipher suites settings in Nginx webserver

2021-05-03 Thread Lukas Tribus
On Mon, 3 May 2021 at 18:47, Kaushal Shriyan wrote: > > Hi, > > Is there a way to verify if the below cipher suites set are accurate > and are free from any vulnerabilities? I suggest you use tools like the public Qualys ssltest: https://www.ssllabs.com/ssltest/ or testssl: https://github.com/dr

Re: SSL Cipher suites settings in Nginx webserver

2021-05-03 Thread Thomas Ward
The Mozilla configuration tool for ciphers is generally the best source for cipher information, they update it regularly as things change in terms of "best ciphers to utilize" and security issues crop up. All of those ciphers, in my opinion, are fine.  The discussion of whether these ciphers a

SSL Cipher suites settings in Nginx webserver

2021-05-03 Thread Kaushal Shriyan
Hi, I am using Lets Encrypt SSL Certificates for Nginx 1.20.00 webserver running on CentOS Linux release 7.9.2009 (Core). I will appreciate it if someone can guide me to set the cipher suites in the Nginx Webserver config. I am referring to https://ssl-config.mozilla.org/. Is there a way to verify