Website Is Encrypted With Obsolete Cryptography
“Website is encrypted with obsolete cryptography”
PROBLEM: “Your connection to website is encrypted with obsolete cryptography” when clicking on https “lock” icon in Chrome.
SOLUTION: This little snippet is useful if you have an SSL cert installed on an NGINX 1.6.2 server. Add it to the SSL section of your NGINX host to force connections to your site to authenticate using modern cryptography.
|
1 2 3 4 |
# ssl protocols and ciphers for modern cryptography ssl_protocols SSLv2 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4; ssl_prefer_server_ciphers on; |
