From a328a95c01b9735187fe385d61df435793c14a5c Mon Sep 17 00:00:00 2001 From: Johannes Feichtner Date: Mon, 8 Feb 2016 23:23:56 +0100 Subject: [PATCH] Set default curve to secp384r1 --- scripts/jobs/cron_tasks.inc.http.30.nginx.php | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/jobs/cron_tasks.inc.http.30.nginx.php b/scripts/jobs/cron_tasks.inc.http.30.nginx.php index 54ae6433..bc64deb7 100644 --- a/scripts/jobs/cron_tasks.inc.http.30.nginx.php +++ b/scripts/jobs/cron_tasks.inc.http.30.nginx.php @@ -571,6 +571,7 @@ class nginx extends HttpConfigBase { //$sslsettings .= "\t" . 'ssl on;' . "\n"; $sslsettings .= "\t" . 'ssl_protocols TLSv1 TLSv1.1 TLSv1.2;' . "\n"; $sslsettings .= "\t" . 'ssl_ciphers ' . Settings::Get('system.ssl_cipher_list') . ';' . "\n"; + $sslsettings .= "\t" . 'ssl_ecdh_curve secp384r1;' . "\n"; $sslsettings .= "\t" . 'ssl_prefer_server_ciphers on;' . "\n"; $sslsettings .= "\t" . 'ssl_certificate ' . makeCorrectFile($domain_or_ip['ssl_cert_file']) . ';' . "\n";