From f0920e9caa9a08ad51c1ace0fa73bb03c4bdbd67 Mon Sep 17 00:00:00 2001 From: bfren Date: Sat, 31 Dec 2022 10:48:45 +0000 Subject: [PATCH 1/3] Bumping version to 5.1.9 --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index a106d2a..bd96b42 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -5.1.8 \ No newline at end of file +5.1.9 \ No newline at end of file From e4eaed35503c302075d8bcdf64beb72c7b47feae Mon Sep 17 00:00:00 2001 From: bfren Date: Sat, 31 Dec 2022 10:48:52 +0000 Subject: [PATCH 2/3] Updating to getssl 2.47 --- overlay/tmp/GETSSL_VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/overlay/tmp/GETSSL_VERSION b/overlay/tmp/GETSSL_VERSION index 2e2a9e6..8598cd4 100644 --- a/overlay/tmp/GETSSL_VERSION +++ b/overlay/tmp/GETSSL_VERSION @@ -1 +1 @@ -2.46 \ No newline at end of file +2.47 \ No newline at end of file From 8dbd0fe1e40788d6ba7a68d4f7adf0eaedf7f50d Mon Sep 17 00:00:00 2001 From: bfren Date: Sat, 31 Dec 2022 10:48:59 +0000 Subject: [PATCH 3/3] Adding ssl_alpn to conf --- overlay/etc/bf/templates/ssl-intermediate.conf.esh | 1 + overlay/etc/bf/templates/ssl-modern.conf.esh | 1 + 2 files changed, 2 insertions(+) diff --git a/overlay/etc/bf/templates/ssl-intermediate.conf.esh b/overlay/etc/bf/templates/ssl-intermediate.conf.esh index cfca0b2..b05e27e 100644 --- a/overlay/etc/bf/templates/ssl-intermediate.conf.esh +++ b/overlay/etc/bf/templates/ssl-intermediate.conf.esh @@ -3,6 +3,7 @@ # Using Mozilla's SSL Configuration Generator with 'Intermediate' settings - https://ssl-config.mozilla.org/ #====================================================================================================================== +ssl_alpn h2 http/1.1; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers off; diff --git a/overlay/etc/bf/templates/ssl-modern.conf.esh b/overlay/etc/bf/templates/ssl-modern.conf.esh index 9d476d8..c79d34c 100644 --- a/overlay/etc/bf/templates/ssl-modern.conf.esh +++ b/overlay/etc/bf/templates/ssl-modern.conf.esh @@ -3,6 +3,7 @@ # Using Mozilla's SSL Configuration Generator with 'Modern' settings - https://ssl-config.mozilla.org/ #====================================================================================================================== +ssl_alpn h2 http/1.1; ssl_protocols TLSv1.3; ssl_prefer_server_ciphers off; ssl_session_timeout 1d;