diff --git a/VERSION b/VERSION index a106d2a..bd96b42 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -5.1.8 \ No newline at end of file +5.1.9 \ No newline at end of file diff --git a/overlay/etc/bf/templates/ssl-intermediate.conf.esh b/overlay/etc/bf/templates/ssl-intermediate.conf.esh index cfca0b2..b05e27e 100644 --- a/overlay/etc/bf/templates/ssl-intermediate.conf.esh +++ b/overlay/etc/bf/templates/ssl-intermediate.conf.esh @@ -3,6 +3,7 @@ # Using Mozilla's SSL Configuration Generator with 'Intermediate' settings - https://ssl-config.mozilla.org/ #====================================================================================================================== +ssl_alpn h2 http/1.1; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers off; diff --git a/overlay/etc/bf/templates/ssl-modern.conf.esh b/overlay/etc/bf/templates/ssl-modern.conf.esh index 9d476d8..c79d34c 100644 --- a/overlay/etc/bf/templates/ssl-modern.conf.esh +++ b/overlay/etc/bf/templates/ssl-modern.conf.esh @@ -3,6 +3,7 @@ # Using Mozilla's SSL Configuration Generator with 'Modern' settings - https://ssl-config.mozilla.org/ #====================================================================================================================== +ssl_alpn h2 http/1.1; ssl_protocols TLSv1.3; ssl_prefer_server_ciphers off; ssl_session_timeout 1d; diff --git a/overlay/tmp/GETSSL_VERSION b/overlay/tmp/GETSSL_VERSION index 2e2a9e6..8598cd4 100644 --- a/overlay/tmp/GETSSL_VERSION +++ b/overlay/tmp/GETSSL_VERSION @@ -1 +1 @@ -2.46 \ No newline at end of file +2.47 \ No newline at end of file