4 ms·
Is what you noted in the post still what you use for the nginx ssl_ciphers string? When I ran that through `openssl ciphers -v` I got wildly different ordering
by stock_toaster 13y ago
Is what you noted in the post still what you use for the nginx ssl_ciphers string? When I ran that through `openssl ciphers -v` I got wildly different ordering from what is shown as cipher priority in the post.
- jgrahamc 13y agoAh. It looks like I've put the wrong configuration in the blog post. My fault. I shall update the blog post with the correct configuration. Here's what we are currently using: ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!CAMELLIA; ssl_prefer_server_ciphers on;
- stock_toaster 13y agothanks!
- reedloden 13y agoWhy do you turn off the CAMELLIA ciphers?