dockerfiles/boring-nginx/rootfs/etc/nginx/conf/ssl_params

ssl_protocols TLSv1.3 TLSv1.2;
ssl_ecdh_curve X25519:P-521:P-384;
ssl_ciphers [EECDH+CHACHA20|EECDH+AESGCM];
ssl_prefer_server_ciphers on;

ssl_session_cache shared:SSL:20m;
ssl_session_timeout 15m;
ssl_session_tickets off;
boring-nginx: enable TLS 1.3 again 2017-08-08 17:59:53 +02:00			`ssl_protocols TLSv1.3 TLSv1.2;`
boring-nginx: add P-521 to ssl_params 2016-10-08 19:34:03 +02:00			`ssl_ecdh_curve X25519:P-521:P-384;`
boring-nginx: update ssl_params 2017-08-08 04:57:26 +02:00			`ssl_ciphers [EECDH+CHACHA20\|EECDH+AESGCM];`
add boring-nginx, based on reverse 2016-05-29 02:09:20 +02:00			`ssl_prefer_server_ciphers on;`

			`ssl_session_cache shared:SSL:20m;`
			`ssl_session_timeout 15m;`
			`ssl_session_tickets off;`