Merge pull request #2358 from dokku/2339-jg-ssl-protocols

Guard against poodle vulnerability by default
This commit is contained in:
Jose Diaz-Gonzalez
2016-08-26 14:25:00 -04:00
committed by GitHub

View File

@@ -47,6 +47,7 @@ server {
ssl_certificate {{ $.APP_SSL_PATH }}/server.crt;
ssl_certificate_key {{ $.APP_SSL_PATH }}/server.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
keepalive_timeout 70;
{{ if eq $.SPDY_SUPPORTED "true" }}add_header Alternate-Protocol {{ $.NGINX_SSL_PORT }}:npn-spdy/2;{{ end }}