Skip to content

Instantly share code, notes, and snippets.

View larshesel's full-sized avatar

Lars Hesel Christensen larshesel

View GitHub Profile
@jj1bdx
jj1bdx / erlang-ssl-tls-config.txt
Last active July 13, 2021 07:16 — forked from ferd/gist:af9abf6b3600d2d7f08dba58fdfb514a
Erlang SSL/TLS configuration (originally by Fréd Hébert)
Originally from: http://erlang.org/pipermail/erlang-questions/2017-August/093170.html
For a safe and fast Erlang SSL server, there's a few
configuration values you might want by default:
[{ciphers, CipherList}, % see below
{honor_cipher_order, true}, % pick the server-defined order of ciphers
{secure_renegotiate, true}, % prevent renegotiation hijacks
{client_renegotiation, false}, % prevent clients DoSing w/ renegs
{versions, ['tlsv1.2', 'tlsv1.1']}, % add tlsv1 if you must