diff --git a/conf/global b/conf/global index 89ca3a90..5d57e708 100644 --- a/conf/global +++ b/conf/global @@ -612,7 +612,7 @@ export SSL_DH1024_PARAM_FILE="${SSL_FILE_DIR}/dh2048_param.pem" # use of the most secure ciphers first and gradually fall back to # less-preferred ciphers should the client not support them. -export SSL_CIPHERS='ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5' +export SSL_CIPHERS='EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH' # SSL key. export OPENSSL_CONF="${SSL_FILE_DIR}/openssl.cnf"