summaryrefslogtreecommitdiff
path: root/ssl_conf
diff options
context:
space:
mode:
authorHorus32014-02-27 14:01:03 +0100
committerHorus32014-02-27 14:01:03 +0100
commit4f194e28bcb3e65a80c3f6e2fe57fde039d1bd8c (patch)
treeaa726a88182de6b7bdd340d600f7856977c9cb20 /ssl_conf
downloadnginx_conf-4f194e28bcb3e65a80c3f6e2fe57fde039d1bd8c.tar.gz
init
Diffstat (limited to 'ssl_conf')
-rw-r--r--ssl_conf6
1 files changed, 6 insertions, 0 deletions
diff --git a/ssl_conf b/ssl_conf
new file mode 100644
index 0000000..f997aa5
--- /dev/null
+++ b/ssl_conf
@@ -0,0 +1,6 @@
+ssl_prefer_server_ciphers On;
+ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
+ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
+add_header Strict-Transport-Security max-age=15768000;
+ssl_session_cache shared:SSL:50m;
+ssl_session_timeout 10m;