Hello. I want to suggest this patch for /etc/nginx/nginx.conf in OpenBSD 5.7.

The nginx config (although disabled by default) supports weak Diffie Hellman 
cipher according to ssllabs.com test 
(Grade B).


--- nginx.conf  Tue Jul 21 12:18:44 2015
+++ nginx.conf  Tue Jul 21 10:52:27 2015
@@ -114,7 +114,7 @@
     #    ssl_session_timeout  5m;
     #    ssl_session_cache    shared:SSL:1m;
 
-    #    ssl_ciphers  HIGH:!aNULL:!MD5:!RC4;
+    #    ssl_ciphers  HIGH:!aNULL:!MD5:!RC4:!DHE;
     #    ssl_prefer_server_ciphers   on;
     #}
 

Reply via email to