Mercurial > hg > nginx-site
changeset 1411:8fe28c6edaa1
Removed SSLv3 from ssl_protocols parameters list as insecure example.
| author | Sergey Budnevitch <sb@waeme.net> |
|---|---|
| date | Tue, 10 Feb 2015 14:08:24 +0300 |
| parents | f5dcc23b214f |
| children | 0f85747de5e8 |
| files | xml/en/docs/http/configuring_https_servers.xml xml/en/docs/http/ngx_http_ssl_module.xml xml/ru/docs/http/configuring_https_servers.xml xml/ru/docs/http/ngx_http_ssl_module.xml |
| diffstat | 4 files changed, 10 insertions(+), 10 deletions(-) [+] |
line wrap: on
line diff
--- a/xml/en/docs/http/configuring_https_servers.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/en/docs/http/configuring_https_servers.xml Tue Feb 10 14:08:24 2015 +0300 @@ -8,7 +8,7 @@ <article name="Configuring HTTPS servers" link="/en/docs/http/configuring_https_servers.html" lang="en" - rev="6" + rev="7" author="Igor Sysoev" editor="Brian Mercer"> @@ -28,7 +28,7 @@ server_name www.example.com; ssl_certificate <b>www.example.com.crt</b>; ssl_certificate_key <b>www.example.com.key</b>; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... } @@ -115,7 +115,7 @@ ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... </programlisting>
--- a/xml/en/docs/http/ngx_http_ssl_module.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/en/docs/http/ngx_http_ssl_module.xml Tue Feb 10 14:08:24 2015 +0300 @@ -10,7 +10,7 @@ <module name="Module ngx_http_ssl_module" link="/en/docs/http/ngx_http_ssl_module.html" lang="en" - rev="16"> + rev="17"> <section id="summary"> @@ -71,7 +71,7 @@ listen 443 ssl; <emphasis>keepalive_timeout 70;</emphasis> - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ssl_certificate /usr/local/nginx/conf/cert.pem; ssl_certificate_key /usr/local/nginx/conf/cert.key;
--- a/xml/ru/docs/http/configuring_https_servers.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/ru/docs/http/configuring_https_servers.xml Tue Feb 10 14:08:24 2015 +0300 @@ -8,7 +8,7 @@ <article name="Настройка HTTPS-серверов" link="/ru/docs/http/configuring_https_servers.html" lang="ru" - rev="6" + rev="7" author="Игорь Сысоев" editor="Brian Mercer"> @@ -28,7 +28,7 @@ server_name www.example.com; ssl_certificate <b>www.example.com.crt</b>; ssl_certificate_key <b>www.example.com.key</b>; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... } @@ -115,7 +115,7 @@ ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ... </programlisting>
--- a/xml/ru/docs/http/ngx_http_ssl_module.xml Mon Feb 09 21:46:50 2015 +0300 +++ b/xml/ru/docs/http/ngx_http_ssl_module.xml Tue Feb 10 14:08:24 2015 +0300 @@ -10,7 +10,7 @@ <module name="Модуль ngx_http_ssl_module" link="/ru/docs/http/ngx_http_ssl_module.html" lang="ru" - rev="16"> + rev="17"> <section id="summary"> @@ -71,7 +71,7 @@ listen 443 ssl; <emphasis>keepalive_timeout 70;</emphasis> - ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ssl_certificate /usr/local/nginx/conf/cert.pem; ssl_certificate_key /usr/local/nginx/conf/cert.key;