Skip to content

Instantly share code, notes, and snippets.

@daryltucker

daryltucker/nginx-BEAST-ssl.txt

Created October 2, 2013 19:00
Show Gist options
  • Save daryltucker/6798800 to your computer and use it in GitHub Desktop.
Save daryltucker/6798800 to your computer and use it in GitHub Desktop.
Download ZIP
nginx: SSL BEAST Protection. This opens up RC4 passive vulnerability in exchange of preventing BEAST active vulnerability.
Raw
nginx-BEAST-ssl.txt
ssl_prefer_server_ciphers On;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment