Re: nginx and ssl ciphers

2015-03-18 Thread Scott Larson
Running SSL correctly goes deeper than just declaring ciphers, and at the least I'd recommend using the more modern versions with ECDHE unless there is a technical reason you cannot. That said: ssl_prefer_server_ciphers on; ssl_ciphers AES256-SHA256:AES256-SHA:AES128-SHA256:AES128-SHA

nginx and ssl ciphers

2015-03-18 Thread ManuelRighi
Hello, I need to configure my nginx web server with only specific ssl ciphers. I need to use only this ciphers: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) TLS_RSA_WITH_RC4_128_MD5 (0x0004) TLS_RSA_WITH_RC4_128_SHA (0x0005) TLS