pleroma

commit: 25946f772d1c1d3ff8a4d2c70824654a9c22fc23
parent 1ea4a18ad859600841860cdd1a981da868aa18a0
Author: lambda <pleromagit@rogerbraun.net>
Date:   Sun, 17 Jun 2018 10:33:08 +0000

Merge branch 'patch-2' into 'develop'

Comment for Old Servers

See merge request pleroma/pleroma!224
Diffstat:
M
installation/pleroma.nginx
2
++

1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/installation/pleroma.nginx b/installation/pleroma.nginx
@@ -41,6 +41,8 @@ server {
     # ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
     ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
     ssl_prefer_server_ciphers on;
+    # In case of an old server with an OpenSSL version of 1.0.2 or below,
+    # leave only prime256v1 or comment out the following line.
     ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1;
     ssl_stapling on;
     ssl_stapling_verify on;