diff options
| author | Igor Sysoev <igor@sysoev.ru> | 2009-10-07 14:46:13 +0000 |
|---|---|---|
| committer | Igor Sysoev <igor@sysoev.ru> | 2009-10-07 14:46:13 +0000 |
| commit | 3bed0daced69a8ac0836041eee7e0b4bea58309e (patch) | |
| tree | 130d02110cba8b2d60266253a749267084309a24 | |
| parent | 136dd8d1e692de0f5b96c6f1da51188737d630b0 (diff) | |
| download | nginx-3bed0daced69a8ac0836041eee7e0b4bea58309e.tar.gz nginx-3bed0daced69a8ac0836041eee7e0b4bea58309e.tar.bz2 | |
use only strong ciphers by default
| -rw-r--r-- | src/http/modules/ngx_http_ssl_module.c | 2 | ||||
| -rw-r--r-- | src/mail/ngx_mail_ssl_module.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/http/modules/ngx_http_ssl_module.c b/src/http/modules/ngx_http_ssl_module.c index 1d67eeb26..94000fc1f 100644 --- a/src/http/modules/ngx_http_ssl_module.c +++ b/src/http/modules/ngx_http_ssl_module.c @@ -13,7 +13,7 @@ typedef ngx_int_t (*ngx_ssl_variable_handler_pt)(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s); -#define NGX_DEFAULT_CIPHERS "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM" +#define NGX_DEFAULT_CIPHERS "HIGH:!ADH:!MD5" static ngx_int_t ngx_http_ssl_static_variable(ngx_http_request_t *r, diff --git a/src/mail/ngx_mail_ssl_module.c b/src/mail/ngx_mail_ssl_module.c index c9a9f35d8..90f2b1b2b 100644 --- a/src/mail/ngx_mail_ssl_module.c +++ b/src/mail/ngx_mail_ssl_module.c @@ -9,7 +9,7 @@ #include <ngx_mail.h> -#define NGX_DEFAULT_CIPHERS "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM" +#define NGX_DEFAULT_CIPHERS "HIGH:!ADH:!MD5" static void *ngx_mail_ssl_create_conf(ngx_conf_t *cf); |