From 6caadab410bce15eff1e4e9354047b39f2aee020 Mon Sep 17 00:00:00 2001
From: Franck Nijhof <frenck@addons.community>
Date: Wed, 11 Aug 2021 20:04:12 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=91=20Update=20NGINX=20SSL=20parameter?=
 =?UTF-8?q?s=20(#130)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 traccar/rootfs/etc/nginx/includes/ssl_params.conf | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/traccar/rootfs/etc/nginx/includes/ssl_params.conf b/traccar/rootfs/etc/nginx/includes/ssl_params.conf
index 6f15005..e6789cb 100644
--- a/traccar/rootfs/etc/nginx/includes/ssl_params.conf
+++ b/traccar/rootfs/etc/nginx/includes/ssl_params.conf
@@ -1,7 +1,6 @@
-ssl_protocols TLSv1.2;
-ssl_prefer_server_ciphers on;
-ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA;
-ssl_ecdh_curve secp384r1;
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_prefer_server_ciphers off;
+ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
 ssl_session_timeout  10m;
 ssl_session_cache shared:SSL:10m;
 ssl_session_tickets off;