boring-nginx: add P-521 to ssl_params

This commit is contained in:
Wonderfall 2016-10-08 19:34:03 +02:00 committed by GitHub
parent 2582458590
commit 886873b986

View File

@ -1,5 +1,5 @@
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2;
ssl_ecdh_curve X25519:P-384; ssl_ecdh_curve X25519:P-521:P-384;
ssl_ciphers CECPQ1-ECDSA-AES256-GCM-SHA384:CECPQ1-RSA-AES256-GCM-SHA384:[ECDHE-ECDSA-CHACHA20-POLY1305|ECDHE-RSA-CHACHA20-POLY1305|ECDHE-ECDSA-CHACHA20-POLY1305-D|ECDHE-RSA-CHACHA20-POLY1305-D|ECDHE-ECDSA-AES256-GCM-SHA384|ECDHE-RSA-AES256-GCM-SHA384]:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; ssl_ciphers CECPQ1-ECDSA-AES256-GCM-SHA384:CECPQ1-RSA-AES256-GCM-SHA384:[ECDHE-ECDSA-CHACHA20-POLY1305|ECDHE-RSA-CHACHA20-POLY1305|ECDHE-ECDSA-CHACHA20-POLY1305-D|ECDHE-RSA-CHACHA20-POLY1305-D|ECDHE-ECDSA-AES256-GCM-SHA384|ECDHE-RSA-AES256-GCM-SHA384]:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;