Hakase/nginx-build
2
1 Fork 1
Code Issues Pull Requests Releases Activity

Remove Curve (P-224, P-521)

Browse Source
This commit is contained in:
Hakase
2019-04-18 02:01:45 +09:00
parent 6cad2f3152
commit 206291a0bc
5 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.ko.md
+1 -1
View File
@@ -25,7 +25,7 @@ example Web Server - [https://ssl.hakase.io/](https://ssl.hakase.io/)
- ssl_protocols : TLSv1.2 TLSv1.3
- ssl_ciphers : [TLS13+AESGCM+AES128|TLS13+CHACHA20]:TLS13+AESGCM+AES256:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA
- ssl_prefer_server_ciphers : On
- ssl_ecdh_curve : X25519:P-256:P-384:P-224:P-521
- ssl_ecdh_curve : X25519:P-256:P-384
- ssl_session_timeout : 64800 (< TLSv1.3)
- ssl_session_timeout_tls13 : 172800 (TLSv1.3 only)
- **ssl_dhparam** 는 사용하지 마십시오. 필요 없습니다.
README.md
+1 -1
View File
@@ -26,7 +26,7 @@ Example Web Server - [https://ssl.hakase.io/](https://ssl.hakase.io/)
- ssl_protocols : TLSv1.2 TLSv1.3
- ssl_ciphers : [TLS13+AESGCM+AES128|TLS13+CHACHA20]:TLS13+AESGCM+AES256:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA
- ssl_prefer_server_ciphers : On
- ssl_ecdh_curve : X25519:P-256:P-384:P-224:P-521
- ssl_ecdh_curve : X25519:P-256:P-384
- ssl_session_timeout : 64800 (< TLSv1.3)
- ssl_session_timeout_tls13 : 172800 (TLSv1.3 only)
- DO NOT USE **ssl_dhparam**. Not required.
src/http/modules/ngx_http_ssl_module.c
+1 -1
View File
@@ -15,7 +15,7 @@ typedef ngx_int_t (*ngx_ssl_variable_handler_pt)(ngx_connection_t *c,
#define NGX_DEFAULT_CIPHERS "[TLS13+AESGCM+AES128|TLS13+CHACHA20]:TLS13+AESGCM+AES256:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA"
#define NGX_DEFAULT_ECDH_CURVE "X25519:P-256:P-384:P-224:P-521"
#define NGX_DEFAULT_ECDH_CURVE "X25519:P-256:P-384"
#define NGX_HTTP_NPN_ADVERTISE "\x08http/1.1"
src/mail/ngx_mail_ssl_module.c
+1 -1
View File
@@ -11,7 +11,7 @@
#define NGX_DEFAULT_CIPHERS "[TLS13+AESGCM+AES128|TLS13+CHACHA20]:TLS13+AESGCM+AES256:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA"
#define NGX_DEFAULT_ECDH_CURVE "X25519:P-256:P-384:P-224:P-521"
#define NGX_DEFAULT_ECDH_CURVE "X25519:P-256:P-384"
static void *ngx_mail_ssl_create_conf(ngx_conf_t *cf);
src/stream/ngx_stream_ssl_module.c
+1 -1
View File
@@ -15,7 +15,7 @@ typedef ngx_int_t (*ngx_ssl_variable_handler_pt)(ngx_connection_t *c,
#define NGX_DEFAULT_CIPHERS "[TLS13+AESGCM+AES128|TLS13+CHACHA20]:TLS13+AESGCM+AES256:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA"
#define NGX_DEFAULT_ECDH_CURVE "X25519:P-256:P-384:P-224:P-521"
#define NGX_DEFAULT_ECDH_CURVE "X25519:P-256:P-384"
static ngx_int_t ngx_stream_ssl_handler(ngx_stream_session_t *s);