diff options
Diffstat (limited to 'doc/config/lighttpd.conf')
| -rw-r--r-- | doc/config/lighttpd.conf | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/config/lighttpd.conf b/doc/config/lighttpd.conf index 30129cda..60b0ae1e 100644 --- a/doc/config/lighttpd.conf +++ b/doc/config/lighttpd.conf @@ -411,11 +411,11 @@ server.upload-dirs = ( "/var/tmp" ) ## # so you might want to support 3DES for now - just remove the '!3DES' parts below). ## # - The examples below prefer ciphersuites with "Forward Secrecy" (and ECDHE over DHE (alias EDH)), remove '+kEDH +kRSA' ## # if you don't want that. -## # - SRP and PSK are not supported anyway, excluding those just keeps the list smaller (easier to review) +## # - SRP and PSK are not supported anyway, excluding those ('!kSRP !kPSK') just keeps the list smaller (easier to review) ## # Check your cipher list with: openssl ciphers -v '...' (use single quotes as your shell won't like ! in double quotes) ## # ## # If you know you have RSA keys (standard), you can use: -## ssl.cipher-list = "aRSA+HIGH !3DES +kEDH +kRSA !kSRP" +## ssl.cipher-list = "aRSA+HIGH !3DES +kEDH +kRSA !kSRP !kPSK" ## # The more generic version (without the restriction to RSA keys) is ## # ssl.cipher-list = "HIGH !aNULL !3DES +kEDH +kRSA !kSRP !kPSK" ## # |