use ciphersuits per SSLlabs and BSI recommendations

This commit is contained in:
cpp 2021-08-02 14:57:21 +02:00 committed by Hive
parent 11d5214a9d
commit a33c5f3088

View file

@ -3,9 +3,7 @@ tls:
default:
minVersion: VersionTLS12
cipherSuites:
- TLS_CHACHA20_POLY1305_SHA256
- TLS_AES_128_GCM_SHA256
- TLS_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384