<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>The Mozilla configuration tool for ciphers is generally the best
source for cipher information, they update it regularly as things
change in terms of "best ciphers to utilize" and security issues
crop up.</p>
<p>All of those ciphers, in my opinion, are fine. The discussion of
whether these ciphers are free from vulnerabilities however is not
an NGINX issue, and an OpenSSL / SSL Spec discussion that extends
far beyond NGINX.</p>
<p><br>
</p>
<p>Thomas</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 5/3/21 12:47 PM, Kaushal Shriyan
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAD7Ssm9_WP1SaEBpU3Pw277g=Krtv_wEP4MOoUyANY6U4km-VA@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I am using Lets Encrypt SSL Certificates for Nginx 1.20.00
webserver running on CentOS Linux release 7.9.2009 (Core). I
will appreciate it if someone can guide me to set the cipher
suites in the Nginx Webserver config. I am referring to <a
href="https://ssl-config.mozilla.org/" target="_blank"
moz-do-not-send="true">https://ssl-config.mozilla.org/</a>.
Is there a way to verify if the below cipher suites set are
accurate and are free from any vulnerabilities?</div>
<div><br>
</div>
<div>$openssl version<br>
</div>
<div>OpenSSL 1.0.2k-fips 26 Jan 2017<br>
</div>
<div>$cat /etc/redhat-release</div>
<div>CentOS Linux release 7.9.2009 (Core)</div>
<div>$nginx -v</div>
nginx version: nginx/1.20.0
<div><br>
</div>
<div>ssl_ciphers
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;<br>
</div>
<div><br>
</div>
<div>Please guide and I look forward to hearing from you. Thanks
in Advance.</div>
<div><br>
</div>
<div>Best Regards,</div>
<div><br>
</div>
<div>Kaushal</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
nginx mailing list
<a class="moz-txt-link-abbreviated" href="mailto:nginx@nginx.org">nginx@nginx.org</a>
<a class="moz-txt-link-freetext" href="http://mailman.nginx.org/mailman/listinfo/nginx">http://mailman.nginx.org/mailman/listinfo/nginx</a></pre>
</blockquote>
</body>
</html>