From 8364061fc9901840cafd176d628690a2db723f55 Mon Sep 17 00:00:00 2001
From: "Gallenkamp, Fabian (bax1489)"
 <476-bax1489@users.noreply.gitlab.rrz.uni-hamburg.de>
Date: Wed, 27 Nov 2019 16:10:17 +0100
Subject: [PATCH] Changed Ciphers for TLS1.2 TLS1.3

---
 templates/nginx.conf.j2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/nginx.conf.j2 b/templates/nginx.conf.j2
index 1fec9c6..c15d811 100755
--- a/templates/nginx.conf.j2
+++ b/templates/nginx.conf.j2
@@ -34,8 +34,8 @@ http {
 	ssl_dhparam /etc/nginx/dhparam.pem; 
 	# assumes command executed: openssl dhparam -out /etc/nginx/dhparam.pem 4096
 	
-	ssl_protocols TLSv1.2 TLSv1.3;
-    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+	ssl_protocols TLSv1.2 TLSv1.3; 
+        ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
 	ssl_prefer_server_ciphers on;
 	
 	ssl_session_cache shared:SSL:10m;
-- 
GitLab