Commit e90285fb authored by Glenn Strauss's avatar Glenn Strauss

stronger ciphers default: ssl.cipher-list = "HIGH"

(For simplicity, remove ssl.honor-cipher-order = "enable" (default))
parent 8478126f
......@@ -5,7 +5,5 @@ server.modules += ( "mod_openssl" )
$SERVER["socket"] == "0.0.0.0:443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"
ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"
ssl.honor-cipher-order = "enable"
ssl.cipher-list = "HIGH"
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment