Hakase/nginx-build
2
1 Fork 1
Code Issues Pull Requests Releases Activity

Remove TLSv1.3 draft.

Browse Source
This commit is contained in:
Hakase
2019-02-09 20:37:24 +09:00
parent 29efc8627a
commit eb86129c61
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.ko.md
+2 -2
View File
@@ -27,8 +27,8 @@ example Web Server - [https://ssl.hakase.io/](https://ssl.hakase.io/)
- ssl_prefer_server_ciphers : On
- ssl_ecdh_curve : X25519:P-256:P-384:P-224:P-521
- **ssl_dhparam** 는 사용하지 마십시오. 필요 없습니다.
- TLS v1.3 (draft 23, 26, 28, **final**)
- OpenSSL-3.0.0-dev 사용. (**draft 23, 26, 28, final**)
- TLS v1.3 (**final**)
- OpenSSL-3.0.0-dev 사용. (**final**)
- OpenSSL equal preference patch 사용 ([BoringSSL](https://github.com/google/boringssl) & [buik](https://gitlab.com/buik/openssl/blob/openssl-patch/openssl-1.1))
- 제 OpenSSL Patch 파일은 [여기](https://github.com/hakasenyang/openssl-patch)에 있습니다.
- AES-NI (AES 하드웨어 가속) 이 없는 환경에서는 CHACHA20 Cipher 가 우선으로 적용됩니다. (구 기기 안드로이드 등)
README.md
+2 -2
View File
@@ -28,8 +28,8 @@ Example Web Server - [https://ssl.hakase.io/](https://ssl.hakase.io/)
- ssl_prefer_server_ciphers : On
- ssl_ecdh_curve : X25519:P-256:P-384:P-224:P-521
- DO NOT USE **ssl_dhparam**. Not required.
- TLS v1.3 (draft 23, 26, 28, **final**)
- Use OpenSSL-3.0.0-dev (**draft 23, 26, 28, final**)
- TLS v1.3 (**final**)
- Use OpenSSL-3.0.0-dev (**final**)
- Use OpenSSL equal preference patch ([BoringSSL](https://github.com/google/boringssl) & [buik](https://gitlab.com/buik/openssl/blob/openssl-patch/openssl-1.1))
- My OpenSSL patch is [here](https://github.com/hakasenyang/openssl-patch).
- Prefers ChaCha20 suites with clients that don't have AES-NI(AES hardware acceleration) (e.g., Android devices)