From c36b3f6f5115dc87eb20a946acd65bd5697a6136 Mon Sep 17 00:00:00 2001 From: Adam Cooke Date: Wed, 26 Apr 2017 23:22:18 +0100 Subject: [PATCH] dhparam in default nginx can be optional for now --- resource/nginx.cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/resource/nginx.cfg b/resource/nginx.cfg index 75ef5e8..c1016a9 100644 --- a/resource/nginx.cfg +++ b/resource/nginx.cfg @@ -14,7 +14,7 @@ server { ssl_certificate_key ssl/postal.key; # Generate using: openssl dhparam 4096 -out /etc/ssl/dhparam.pem - ssl_dhparam /etc/ssl/dhparam.pem; + # ssl_dhparam /etc/ssl/dhparam.pem; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_prefer_server_ciphers on;