Remove 3DES from the list of supported ciphers

uber · Jan 22, 2025 · 25f9cbd · 25f9cbd
1 parent c1d9e26
commit 25f9cbd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nginx/config/base.go b/nginx/config/base.go
@@ -75,7 +75,7 @@ http {
   {{end}}
   ssl_protocols TLSv1.2; # Dropping SSLv3, ref: POODLE
   ssl_prefer_server_ciphers on;
-  ssl_ciphers ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5:!SHA1:!aNULL:!eNULL@SECLEVEL=2;
+  ssl_ciphers ECDH+AES256:ECDH+AES128:!ADH:!AECDH:!MD5:!SHA1:!aNULL:!eNULL@SECLEVEL=2;
 
   ##
   # Logging Settings