Change default ciphers to intermediate

This commit is contained in:
Paweł Chmielowski 2018-12-07 14:38:54 +01:00
parent 7713edc6bb
commit f02f44ad3f
1 changed files with 6 additions and 5 deletions

View File

@ -52,7 +52,10 @@ define_macro:
- "no_sslv2" - "no_sslv2"
- "no_sslv3" - "no_sslv3"
- "no_tlsv1" - "no_tlsv1"
- "no_tlsv1.1" - "no_tlsv1_1"
c2s_ciphers: CIPHERS_INTERMEDIATE
c2s_protocol_options: PROTOCOL_OPTIONS_INTERMEDIATE
listen: listen:
- -
@ -62,8 +65,6 @@ listen:
max_stanza_size: 262144 max_stanza_size: 262144
shaper: c2s_shaper shaper: c2s_shaper
access: c2s access: c2s
ciphers: CIPHERS_MODERN
protocol_options: PROTOCOL_OPTIONS_MODERN
starttls_required: true starttls_required: true
- -
port: 5269 port: 5269
@ -81,8 +82,8 @@ listen:
"/ws": ejabberd_http_ws "/ws": ejabberd_http_ws
web_admin: true web_admin: true
captcha: true captcha: true
ciphers: CIPHERS_MODERN ciphers: CIPHERS_INTERMEDIATE
protocol_options: PROTOCOL_OPTIONS_MODERN protocol_options: PROTOCOL_OPTIONS_INTERMEDIATE
tls: true tls: true
s2s_use_starttls: optional s2s_use_starttls: optional