From 01eb896229ad5ec964b0091963952654966739dd Mon Sep 17 00:00:00 2001 From: Hakase Date: Thu, 7 Jun 2018 10:18:50 +0900 Subject: [PATCH] Update README.md --- README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 8d2a008..b80374d 100644 --- a/README.md +++ b/README.md @@ -20,21 +20,21 @@ ## Features - Auto SSL Cipher settings - **The following information is preset. Do not set it yourself unless you need it.** - - ssl_protocols : TLSv1.2 TLSv1.3 - - ssl_ciphers : [TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA + - ssl_protocols : TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 + - ssl_ciphers : [TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES - ssl_prefer_server_ciphers : On - - ssl_ecdh_curve : X25519:P-256:P-384 + - ssl_ecdh_curve : X25519:P-256:P-384:P-224:P-521 - DO NOT USE **ssl_dhparam**. Not required. - TLS v1.3 (draft 23, 28) - Use OpenSSL-1.1.1-pre8-dev (**draft 23, 28**) - Use OpenSSL equal preference patch ([BoringSSL](https://github.com/google/boringssl) & [CentminMod](https://centminmod.com/)) - My equal preference patch is [here](https://git.hakase.app/Hakase/openssl-patch/src/branch/master/openssl-equal-pre8_ciphers.patch) -- Prefers ChaCha20 suites with clients that don't have AES-NI(AES hardware acceleration) (e.g., Android devices) +- Prefers ChaCha20 suites with clients that don't have AES-NI(AES hardware acceleration) (e.g., Android devices) - More library! - headers_more_nginx_module - Google PageSpeed for nginx - and the other. -- Hpack, SSL Dynamic TLS Records Support. (Thanks to cloudflare!) +- SPDY, HPACK, SSL Dynamic TLS Records Support. (Thanks to cloudflare!) ## Upcoming Features - Support TLS v1.3 (not draft)