Skip to content

Commit 9efcb59

Browse files
authored
update dhparams to 4096
see dev-sec/ansible-collection-hardening#501
1 parent caae721 commit 9efcb59

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

controls/nginx_spec.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -235,7 +235,7 @@
235235
its('ssl_session_tickets') { should eq 'off' }
236236
its('ssl_ciphers') { should eq '\'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256\'' }
237237
its('ssl_prefer_server_ciphers') { should eq 'on' }
238-
its('ssl_dhparam') { should eq '/etc/nginx/dh2048.pem' }
238+
its('ssl_dhparam') { should eq '/etc/nginx/dh4096.pem' }
239239
end
240240
end
241241

0 commit comments

Comments
 (0)