Skip to content

Instantly share code, notes, and snippets.

@cypres

cypres/ssl_params

Created October 17, 2014 14:43
Show Gist options
  • Save cypres/888a4972b880a570502d to your computer and use it in GitHub Desktop.
Save cypres/888a4972b880a570502d to your computer and use it in GitHub Desktop.
Download ZIP
SSL config to keep IE6 on XP Support and Forward Secrecy - yet mitigate POODLE and BEAST server side
Raw
ssl_params
# For nginx. Requires OpenSSL 1.0.1j
ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!CAMELLIA;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment