Ryan Lane has uploaded a new change for review.
https://gerrit.wikimedia.org/r/83043
Change subject: Add GCM cipher and remove DES
......................................................................
Add GCM cipher and remove DES
Change-Id: I2e2253beb69f999491b4add64d9b101bf53effbd
---
M templates/nginx/nginx.conf.erb
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/43/83043/1
diff --git a/templates/nginx/nginx.conf.erb b/templates/nginx/nginx.conf.erb
index 9dc7d18..e18cdb3 100644
--- a/templates/nginx/nginx.conf.erb
+++ b/templates/nginx/nginx.conf.erb
@@ -64,7 +64,7 @@
# SSLv2 is insecure, only allow SSLv3 and TLSv1
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
# Limit ciphers allowed
- ssl_ciphers RC4-SHA:RC4-MD5:DES-CBC3-SHA:AES128-SHA:AES256-SHA;
+ ssl_ciphers AES128-GCM-SHA256:RC4-SHA:RC4-MD5:AES128-SHA:AES256-SHA;
# Prefer server ciphers (Prefer RC4 first to combat BEAST)
ssl_prefer_server_ciphers on;
<% end %>
--
To view, visit https://gerrit.wikimedia.org/r/83043
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I2e2253beb69f999491b4add64d9b101bf53effbd
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ryan Lane <rl...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
