web: enable ssl_protocol TLSv1.2 only

6 years ago · 7c6c6bcefb
parent 4b88a28fcc
commit 7c6c6bcefb
1 changed files with 1 additions and 1 deletions
--- a/web/rootfs/defaults/ssl.conf
+++ b/web/rootfs/defaults/ssl.conf
@ -16,6 +16,6 @@ ssl_certificate_key /config/keys/cert.key;
 {{ end }}

 # protocols
-ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+ssl_protocols TLSv1.2;
 ssl_prefer_server_ciphers on;
 ssl_ciphers ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS;