summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJan Huwald <jh@sotun.de>2014-02-03 00:18:53 (GMT)
committerJan Huwald <jh@sotun.de>2014-02-03 00:18:53 (GMT)
commit5fcc8ae5e011a00f01968fb6f638e790e5dde027 (patch)
treef4ae20726089e9bcb2e1af8821c1d5e3a1a4b4ae
parent101cdc6e53f2229a48db9f5fc3bfee5cbdc2f0e0 (diff)
improve ssl security: disable insecure renegtiationHEADmaster
-rw-r--r--ereproxy_config.erl3
1 files changed, 2 insertions, 1 deletions
diff --git a/ereproxy_config.erl b/ereproxy_config.erl
index 80bf243..c5604c5 100644
--- a/ereproxy_config.erl
+++ b/ereproxy_config.erl
@@ -8,7 +8,8 @@ config() ->
ssl_opts = [{certfile, "example/cert.pem"},
{keyfile, "example/key.pem"},
{versions, [tlsv1, 'tlsv1.1', 'tlsv1.2']},
- {ciphers, ciphers()}]
+ {ciphers, ciphers()},
+ {secure_renegotiate, true}]
}.
%% select_destination
contact: Jan Huwald // Impressum