Revision 677f0a18
Added by Chris Buechler over 9 years ago
| src/etc/inc/system.inc | ||
|---|---|---|
| 1324 | 1324 |
$nginx_config .= "\t\tssl_session_timeout 10m;\n"; |
| 1325 | 1325 |
$nginx_config .= "\t\tkeepalive_timeout 70;\n"; |
| 1326 | 1326 |
$nginx_config .= "\t\tssl_session_cache shared:SSL:10m;\n"; |
| 1327 |
$nginx_config .= "\t\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n"; |
|
| 1327 |
if ($captive_portal !== false) {
|
|
| 1328 |
// leave TLSv1.0 for CP for now for compatibility |
|
| 1329 |
$nginx_config .= "\t\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n"; |
|
| 1330 |
} else {
|
|
| 1331 |
$nginx_config .= "\t\tssl_protocols TLSv1.1 TLSv1.2;\n"; |
|
| 1332 |
} |
|
| 1328 | 1333 |
$nginx_config .= "\t\tssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\n"; |
| 1329 | 1334 |
$nginx_config .= "\t\tssl_prefer_server_ciphers on;\n"; |
| 1330 | 1335 |
$nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000\";\n"; |
Also available in: Unified diff
Disable TLSv1.0 for web GUI's nginx instance. Ticket #5984