comparison xml/ru/docs/http/configuring_https_servers.xml @ 1411:8fe28c6edaa1

Removed SSLv3 from ssl_protocols parameters list as insecure example.
author Sergey Budnevitch <sb@waeme.net>
date Tue, 10 Feb 2015 14:08:24 +0300
parents 4fecf0715bbf
children 3687cc9a3592
comparison
equal deleted inserted replaced
1410:f5dcc23b214f 1411:8fe28c6edaa1
6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd"> 6 <!DOCTYPE article SYSTEM "../../../../dtd/article.dtd">
7 7
8 <article name="Настройка HTTPS-серверов" 8 <article name="Настройка HTTPS-серверов"
9 link="/ru/docs/http/configuring_https_servers.html" 9 link="/ru/docs/http/configuring_https_servers.html"
10 lang="ru" 10 lang="ru"
11 rev="6" 11 rev="7"
12 author="Игорь Сысоев" 12 author="Игорь Сысоев"
13 editor="Brian Mercer"> 13 editor="Brian Mercer">
14 14
15 <section> 15 <section>
16 16
26 server { 26 server {
27 listen 443 <b>ssl</b>; 27 listen 443 <b>ssl</b>;
28 server_name www.example.com; 28 server_name www.example.com;
29 ssl_certificate <b>www.example.com.crt</b>; 29 ssl_certificate <b>www.example.com.crt</b>;
30 ssl_certificate_key <b>www.example.com.key</b>; 30 ssl_certificate_key <b>www.example.com.key</b>;
31 ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; 31 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
32 ssl_ciphers HIGH:!aNULL:!MD5; 32 ssl_ciphers HIGH:!aNULL:!MD5;
33 ... 33 ...
34 } 34 }
35 </programlisting> 35 </programlisting>
36 36
113 server_name www.example.com; 113 server_name www.example.com;
114 <b>keepalive_timeout 70</b>; 114 <b>keepalive_timeout 70</b>;
115 115
116 ssl_certificate www.example.com.crt; 116 ssl_certificate www.example.com.crt;
117 ssl_certificate_key www.example.com.key; 117 ssl_certificate_key www.example.com.key;
118 ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; 118 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
119 ssl_ciphers HIGH:!aNULL:!MD5; 119 ssl_ciphers HIGH:!aNULL:!MD5;
120 ... 120 ...
121 </programlisting> 121 </programlisting>
122 </para> 122 </para>
123 123