# HG changeset patch # User Sergey Budnevitch # Date 1423566504 -10800 # Node ID 8fe28c6edaa1903ae36b9cbdd15ffa496b7ac03d # Parent f5dcc23b214feff64eddaa2178eaa8ebb41b0638 Removed SSLv3 from ssl_protocols parameters list as insecure example. diff -r f5dcc23b214f -r 8fe28c6edaa1 xml/en/docs/http/configuring_https_servers.xml --- a/xml/en/docs/http/configuring_https_servers.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/en/docs/http/configuring_https_servers.xml Tue Feb 10 14:08:24 2015 +0300 @@ -8,7 +8,7 @@
@@ -28,7 +28,7 @@ server_name www.example.com; ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... } @@ -115,7 +115,7 @@ ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... diff -r f5dcc23b214f -r 8fe28c6edaa1 xml/en/docs/http/ngx_http_ssl_module.xml --- a/xml/en/docs/http/ngx_http_ssl_module.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/en/docs/http/ngx_http_ssl_module.xml Tue Feb 10 14:08:24 2015 +0300 @@ -10,7 +10,7 @@ + rev="17">
@@ -71,7 +71,7 @@ listen 443 ssl; keepalive_timeout 70; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ssl_certificate /usr/local/nginx/conf/cert.pem; ssl_certificate_key /usr/local/nginx/conf/cert.key; diff -r f5dcc23b214f -r 8fe28c6edaa1 xml/ru/docs/http/configuring_https_servers.xml --- a/xml/ru/docs/http/configuring_https_servers.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/ru/docs/http/configuring_https_servers.xml Tue Feb 10 14:08:24 2015 +0300 @@ -8,7 +8,7 @@
@@ -28,7 +28,7 @@ server_name www.example.com; ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... } @@ -115,7 +115,7 @@ ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... diff -r f5dcc23b214f -r 8fe28c6edaa1 xml/ru/docs/http/ngx_http_ssl_module.xml --- a/xml/ru/docs/http/ngx_http_ssl_module.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/ru/docs/http/ngx_http_ssl_module.xml Tue Feb 10 14:08:24 2015 +0300 @@ -10,7 +10,7 @@ + rev="17">
@@ -71,7 +71,7 @@ listen 443 ssl; keepalive_timeout 70; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ssl_certificate /usr/local/nginx/conf/cert.pem; ssl_certificate_key /usr/local/nginx/conf/cert.key;