Hi again,
On 2014-08-18 09:17, Alex wrote:
Hi,
I have successfully compiled nginx/1.7.4 with boringssl. One thing I
am not sure if it's possible already is to take advantage of
equal-preference cipher groups that Boringssl supports.
[...]
Would this already work with nginx' ssl_ciphers parameter or would
nginx require further patching to support such grouping parameter?
I feel kinda stupid that I didn't figure it out earlier. Of course it's
possible out of the box with nginx/boringssl. I made a small writeup
here:
https://www.zeitgeist.se/2014/08/23/we-like-aes-and-chacha20-equally-thanks-to-boringssl/
Basically, you group ciphers in the ciphers list like this:
[ECDHE-RSA-CHACHA20-POLY1305|ECDHE-RSA-AES128-GCM-SHA256]
Best,
Alex
_______________________________________________
nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx
