diff --git a/deploy/nginx/ssl.conf b/deploy/nginx/ssl.conf index b2042576..6ed11230 100644 --- a/deploy/nginx/ssl.conf +++ b/deploy/nginx/ssl.conf @@ -13,7 +13,7 @@ server { ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5; # Disable SSLv3 - ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1.2 TLSv1.3; # Diffie-Hellman parameter for DHE ciphersuites # $ sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096