http/2 needs "weaker" ciphers?

p.heppler nginx-forum at nginx.us
Fri Oct 9 14:14:24 UTC 2015


I'm running nginx 1.9.5 and switched from spdy to http/2.
I wonder why I had to change my cipher list and add "weaker" ciphers?

before (worked fine with spdy):
ssl_ciphers 'AES256+EECDH:AES256+EDH';

after:
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,262084,262084#msg-262084



More information about the nginx mailing list