Getting forward secrecy enabled

justin nginx-forum at nginx.us
Wed Oct 2 05:16:18 UTC 2013


I tried what was recommended by
(http://www.mare-system.de/guide-to-nginx-ssl-spdy-hsts/#perfect-forward-secrecy):

But still missing: IE 11 / Win 8.1 (FAIL)
                           IE 8-10 / Win 7 (NO FS)
                           IE 7 / Vista (NO FS)

Here is my exact config:

  ssl_prefer_server_ciphers on;
  ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers
EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS;

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243341,243345#msg-243345



More information about the nginx mailing list