[PR #1182] [MERGED] Update ssl-ciphers.conf #3392

Closed
opened 2026-02-26 08:30:28 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/NginxProxyManager/nginx-proxy-manager/pull/1182
Author: @DSorlov
Created: 6/17/2021
Status: Merged
Merged: 6/19/2021
Merged by: @jc21

Base: developHead: develop


📝 Commits (1)

📊 Changes

1 file changed (+2 additions, -4 deletions)

View changed files

📝 docker/rootfs/etc/nginx/conf.d/include/ssl-ciphers.conf (+2 -4)

📄 Description

Removing support (by default) for all the unsecure protocols for SSL. As it is now its very permissive and maximizing on backwards-compability causing bad results in security reviews such as ipv6.cool tests. The default value is revised in this PR to create a balance between security and backwards combability.

This is updated using the latest recommendation as found on https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1d&guideline=5.6


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/NginxProxyManager/nginx-proxy-manager/pull/1182 **Author:** [@DSorlov](https://github.com/DSorlov) **Created:** 6/17/2021 **Status:** ✅ Merged **Merged:** 6/19/2021 **Merged by:** [@jc21](https://github.com/jc21) **Base:** `develop` ← **Head:** `develop` --- ### 📝 Commits (1) - [`3e744b6`](https://github.com/NginxProxyManager/nginx-proxy-manager/commit/3e744b6b2d88d8a5dc84920dc743ee385335aff4) Update ssl-ciphers.conf ### 📊 Changes **1 file changed** (+2 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `docker/rootfs/etc/nginx/conf.d/include/ssl-ciphers.conf` (+2 -4) </details> ### 📄 Description Removing support (by default) for all the unsecure protocols for SSL. As it is now its very permissive and maximizing on backwards-compability causing bad results in security reviews such as ipv6.cool tests. The default value is revised in this PR to create a balance between security and backwards combability. This is updated using the latest recommendation as found on https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1d&guideline=5.6 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 08:30:28 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#3392
No description provided.