Skip to content

Commit eba7d8a

Browse files
authored
Fix comment about Mozilla Modern Policy and TLS1.3
Thanks to @deAtog for pointing it out
1 parent 26e7649 commit eba7d8a

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

nginx.tmpl

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,8 @@
2525
{{ define "ssl_policy" }}
2626
{{ if eq .ssl_policy "Mozilla-Modern" }}
2727
ssl_protocols TLSv1.3;
28-
{{/* ssl_ciphers is undefined in the Mozilla-Modern policy /*}}
28+
{{/* nginx currently lacks ability to choose ciphers in TLS 1.3 in configuration, see https://trac.nginx.org/nginx/ticket/1529 /*}}
29+
{{/* a possible workaround can be modify /etc/ssl/openssl.cnf to change it globally (see https://trac.nginx.org/nginx/ticket/1529#comment:12 ) /*}}
2930
{{/* explicitly set ngnix default value in order to allow single servers to override the global http value */}}
3031
ssl_ciphers HIGH:!aNULL:!MD5;
3132
ssl_prefer_server_ciphers off;

0 commit comments

Comments
 (0)