Viyurz/vps
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

NGINX RP : Downgrade params SSL pr Firefox android

Browse source 
Pour jsp quelle raison firefox android balance une erreur si on essaie
d'ajouter SearXNG aux moteurs de recherche en ayant que SSL 1.3
d'activé. Du coup j'ai baissé les exigeances pr autoriser SSL 1.2.
This commit is contained in:
Viyurz 2023-11-23 13:04:15 +00:00
parent f5874b66a5
commit 875c1ac1f4
No known key found for this signature in database
3 changed files with 13 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nginx-rp/dhparam.txt Normal file
View file

@ -0,0 +1,8 @@
-----BEGIN DH PARAMETERS-----
MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a
87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7
YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi
7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD
ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg==
-----END DH PARAMETERS-----

1
nginx-rp/docker-compose.yaml
View file

@ -6,5 +6,6 @@ services:
network_mode: host network_mode: host
volumes: volumes:
- ./nginx.conf:/etc/nginx/nginx.conf - ./nginx.conf:/etc/nginx/nginx.conf
- ./dhparam.txt:/dhparam.txt
- /etc/letsencrypt/live/viyurz.fr:/etc/letsencrypt/live/viyurz.fr - /etc/letsencrypt/live/viyurz.fr:/etc/letsencrypt/live/viyurz.fr
- /etc/letsencrypt/archive/viyurz.fr:/etc/letsencrypt/archive/viyurz.fr - /etc/letsencrypt/archive/viyurz.fr:/etc/letsencrypt/archive/viyurz.fr

8
nginx-rp/nginx.conf
View file

@ -34,13 +34,13 @@ http {
ssl_trusted_certificate /etc/letsencrypt/live/viyurz.fr/chain.pem; ssl_trusted_certificate /etc/letsencrypt/live/viyurz.fr/chain.pem;
# modern configuration # modern configuration
ssl_protocols TLSv1.3; # ssl_protocols TLSv1.3;
# intermediate configuration # intermediate configuration
# ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
# ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
# curl https://ssl-config.mozilla.org/ffdhe2048.txt > /path/to/dhparam # curl https://ssl-config.mozilla.org/ffdhe2048.txt > /path/to/dhparam
# ssl_dhparam /path/to/dhparam; ssl_dhparam /dhparam.txt;
ssl_prefer_server_ciphers off; ssl_prefer_server_ciphers off;