search

cloudflare / sslconfig

Cloudflare's Internet facing SSL configuration
BSD 3-Clause "New" or "Revised" License
1.3k stars 132 forks source link

ssl_ciphers syntax #76

Closed blagoeres closed 7 years ago

blagoeres commented 7 years ago

Hi. I noticed new syntax for ssl_ciphers directive in conf file. I tried it but I get syntax error. How is this valid syntax ?

injust commented 7 years ago

This is the syntax for BoringSSL's bracketed equal-preference groups, which is not supported by OpenSSL.

HansVanEijsden commented 7 years ago

Or... use this patch on OpenSSL 1.1.0f: https://gitlab.com/buik/openssl/blob/openssl-patch/openssl-1.1/OpenSSL1.1f-equal-preference-cipher-groups.patch

blagoeres commented 7 years ago

I was just curious about the syntax. I compiled nginx with openssl 1.1.0f and it didn't work. So either using boringssl or pathing openssl is an option. A lot of work. I am giving up. Thanks for help.