Skip to content

Commit

Permalink
UPDATE ssl.d/globalssl.conf [ci skip]
Browse files Browse the repository at this point in the history
Recommended SSL settings for all nginx sites
  • Loading branch information
mitchellkrogza committed Jul 4, 2019
1 parent 90e8578 commit 9a35bb8
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions ssl.d/globalssl.conf
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@
# include /etc/nginx/ssl.d/globalssl.conf;


##
##
# DIFFIE HELMAN ENCRYPTION / DHE
##

Expand Down Expand Up @@ -128,9 +128,9 @@
ssl_stapling on;
ssl_stapling_verify on;

# Do not use resolvers for OCSP see comment in - https://scotthelme.co.uk/ocsp-stapling-speeding-up-ssl/
# Do not use resolvers for OCSP see comment in - https://scotthelme.co.uk/ocsp-stapling-speeding-up-ssl/
# http:https://disq.us/url?url=http%3A%2F%2Fblog.zorinaq.com%2Fnginx-resolver-vulns%2F%3AP2dn26U8hf5EMF__e_ZIRGBpc3E&cuid=2541595
# resolver 8.8.8.8 8.8.4.4 valid=300s;
# resolver_timeout 5s;
# resolver 8.8.8.8 8.8.4.4 valid=300s;
# resolver_timeout 5s;


0 comments on commit 9a35bb8

Please sign in to comment.