Skip to content

Instantly share code, notes, and snippets.

@nbeguier

nbeguier/nginx.conf

Last active January 4, 2021 13:47
Show Gist options
  • Save nbeguier/e9320f48b39ed682c348cb9a67e1bbd0 to your computer and use it in GitHub Desktop.
Save nbeguier/e9320f48b39ed682c348cb9a67e1bbd0 to your computer and use it in GitHub Desktop.
Download ZIP
[DEPRECATED] Nginx : BEAST & RC4
Raw
nginx.conf
# BEAST protection
## Remove TLSv1.0
ssl_protocols TLSv1.1 TLSv1.2;
# BEAST protection, NO RC4 protection
## Allow TLSv1.0 and force RC4
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:RC4:!SEED;
# NO BEAST protection, RC4 protection
## Allow TLSv1.0 and remove RC4 from bulk ciphers
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment