Hakase/nginx-build
2
1 Fork 1
Code Issues Pull Requests Releases Activity

Update README.md

Browse Source
This commit is contained in:
Hakase
2018-06-07 10:18:50 +09:00
parent 94640cc3c8
commit 01eb896229
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+5 -5
View File
@@ -20,21 +20,21 @@
## Features
- Auto SSL Cipher settings
- **The following information is preset. Do not set it yourself unless you need it.**
- ssl_protocols : TLSv1.2 TLSv1.3
- ssl_ciphers : [TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA
- ssl_protocols : TLSv1 TLSv1.1 TLSv1.2 TLSv1.3
- ssl_ciphers : [TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES
- ssl_prefer_server_ciphers : On
- ssl_ecdh_curve : X25519:P-256:P-384
- ssl_ecdh_curve : X25519:P-256:P-384:P-224:P-521
- DO NOT USE **ssl_dhparam**. Not required.
- TLS v1.3 (draft 23, 28)
- Use OpenSSL-1.1.1-pre8-dev (**draft 23, 28**)
- Use OpenSSL equal preference patch ([BoringSSL](https://github.com/google/boringssl) & [CentminMod](https://centminmod.com/))
- My equal preference patch is [here](https://git.hakase.app/Hakase/openssl-patch/src/branch/master/openssl-equal-pre8_ciphers.patch)
- Prefers ChaCha20 suites with clients that don't have AES-NI(AES hardware acceleration) (e.g., Android devices)
- Prefers ChaCha20 suites with clients that don't have AES-NI(AES hardware acceleration) (e.g., Android devices)
- More library!
- headers_more_nginx_module
- Google PageSpeed for nginx
- and the other.
- Hpack, SSL Dynamic TLS Records Support. (Thanks to cloudflare!)
- SPDY, HPACK, SSL Dynamic TLS Records Support. (Thanks to cloudflare!)
## Upcoming Features
- Support TLS v1.3 (not draft)