|
@@ -37,7 +37,8 @@ http {
|
|
|
|
|
|
|
|
|
|
|
|
|
# SSL PCI Compliance
|
|
# SSL PCI Compliance
|
|
|
- ssl_ciphers RC4:HIGH:!aNULL:!MD5:!kEDH;
|
|
|
|
|
|
|
+ ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
|
|
|
|
|
+ ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_cache shared:SSL:10m;
|
|
|
ssl_prefer_server_ciphers on;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
|
|