Skip to content

Instantly share code, notes, and snippets.

@imgeraldalinio

imgeraldalinio/haproxy-ssl-cipher-bind.cfg

Created May 12, 2020 19:14
Show Gist options
  • Save imgeraldalinio/77ba53e0468213bad65f92407b9a9a4b to your computer and use it in GitHub Desktop.
Save imgeraldalinio/77ba53e0468213bad65f92407b9a9a4b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
haproxy-ssl-cipher-bind.cfg
# generated 2020-05-12, Mozilla Guideline v5.4, HAProxy 2.1.4, OpenSSL 1.1.1, intermediate configuration, no OCSP
# https://ssl-config.mozilla.org/#server=haproxy&version=2.1.4&config=intermediate&openssl=1.1.1&ocsp=false&guideline=5.4
global
# intermediate configuration
ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
ssl-default-server-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ssl-default-server-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment