Bump nginx to support tlsv1.3

Signed-off-by: Joe Grund <jgrund@whamcloud.io>
whamcloud · Sep 4, 2020 · dfbfa37 · dfbfa37
1 parent 92e2740
commit dfbfa37
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/chroma-manager.conf.template b/chroma-manager.conf.template
@@ -63,9 +63,8 @@ server {
  ssl_trusted_certificate {{SSL_PATH}}/authority.crt;
  ssl_client_certificate {{SSL_PATH}}/authority.crt;
  ssl_verify_client optional;
- ssl_protocols TLSv1.2;
+ ssl_protocols TLSv1.2 TLSv1.3;
  ssl_prefer_server_ciphers on;
- ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:!DH+3DES:!ADH:!AECDH:!RC4:!aNULL:!MD5';
 
  ssl_session_cache shared:SSL:10m;
  ssl_session_timeout 180m;