summaryrefslogtreecommitdiffstats
path: root/roles/common-web/files/etc/nginx/snippets/ssl.conf
Commit message (Collapse)AuthorAgeFiles
* Upgrade baseline to Debian Stretch.Guilhem Moulin2018-12-031
|
* HSTS: use the standard capitalization of includeSubDomains.Guilhem Moulin2016-07-121
| | | | Cf. RFC 6797 sec. 6.1.2.
* Rename letsencrypt-tiny to lacme.Guilhem Moulin2016-06-151
|
* Move /etc/ssl/private/dhparams.pem to /etc/ssl/dhparams.pem and make it public.Guilhem Moulin2016-05-181
| | | | | | | | | | Ideally we we should also increase the Diffie-Hellman group size from 2048-bit to 3072-bit, as per ENISA 2014 report. https://www.enisa.europa.eu/publications/algorithms-key-size-and-parameters-report-2014 But we postpone that for now until we are reasonably certain that older client won't be left out.
* nginx: update ssl_ciphers to follow Mozilla's TLS server recommendation.Guilhem Moulin2016-04-021
| | | | https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=nginx-1.6.2&openssl=1.0.1k&hsts=yes&profile=intermediate
* Replace LE's X1 intermediate CA with X3 since the latter has better support ↵Guilhem Moulin2016-03-281
| | | | for XP.
* Fix Let's Encrypt CAfile.Guilhem Moulin2015-12-281
|
* nginx: Move include.d/* to snippets/.Guilhem Moulin2015-12-201