dropped TLSv1.2 in nginx streams

Cielquan · Nov 6, 2019 · 0ab8f5f · 0ab8f5f
1 parent 012b7a0
commit 0ab8f5f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/nginx-docker/templates/dns-over-tls.conf.template b/nginx-docker/templates/dns-over-tls.conf.template
@@ -4,8 +4,8 @@ server {
  include snippets/cert_DOMAIN.conf;
  ssl_dhparam /etc/nginx/dhparam.pem;
 
- ssl_protocols TLSv1.2 TLSv1.3;
- ssl_ciphers HIGH:!aNULL:!MD5;
+ ssl_protocols TLSv1.3;
+ ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256;
  ssl_handshake_timeout 10s;
  ssl_session_cache shared:DoT:20m;
  ssl_session_timeout 4h;