summaryrefslogtreecommitdiff
path: root/debian/conf-available/10-ssl.conf
diff options
context:
space:
mode:
Diffstat (limited to 'debian/conf-available/10-ssl.conf')
-rw-r--r--debian/conf-available/10-ssl.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/debian/conf-available/10-ssl.conf b/debian/conf-available/10-ssl.conf
index 4656d86..34f3912 100644
--- a/debian/conf-available/10-ssl.conf
+++ b/debian/conf-available/10-ssl.conf
@@ -3,4 +3,7 @@
$SERVER["socket"] == "0.0.0.0:443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"
+
+ ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"
+ ssl.honor-cipher-order = "enable"
}