Update HTTPS configuration (#333)
authorAngristan <stanislas.lange@protonmail.com>
Fri, 10 Feb 2017 00:47:37 +0000 (01:47 +0100)
committerMatt Palmer <mpalmer@hezmatt.org>
Fri, 10 Feb 2017 00:47:37 +0000 (11:47 +1100)
commitf1ccfce7fee330df1326a5a2c596b09045c4f1ed
treed053217bf29b18c3a01ac6deaf26bd5a790c6637
parent7644adb7d0a894fba2b85a0efcc1a88e8de49fb3
Update HTTPS configuration (#333)

* Update HTTPS configuration

We should disable DH and use AES CBC/GCM + ECDH ciphers only. It's fast and secure, and widely compatible (cf https://tls.imirhil.fr/suite).

* Specify which curve to use
templates/web.ssl.template.yml