Nginx cypher filter

[Kloadut]

Add cypher list to nginx template, kinda like this:

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   
ssl_ciphers DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DES-CBC3-SHA:!ADH:!aNULL;   
ssl_prefer_server_ciphers on;

To be tested

[alexjj]

This gist gives a nice set of ciphers, plus potentially other nginx SSL extras

[mbugeia]

Here is the configuration I use with yunohost: https://gist.github.com/mbugeia/0252eba19225bf10269e

The cipher list is from intermediate compatibility of https://wiki.mozilla.org/Security/Server_Side_TLS

Tested with https://www.ssllabs.com/ssltest/ With a valid certificate (startssl) and sha2 intermediate certificate:

With yunohost self-signed certificate

Client compatibility

Protocol details