From 3f772a8f81baf40d700dd074cfb7d82de076e2b0 Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Mon, 4 Oct 2021 00:51:41 +0200
Subject: [PATCH] README.install: change ssl_ciphers.

---
 README.install | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.install b/README.install
index 6534257..5d6ee3e 100644
--- a/README.install
+++ b/README.install
@@ -233,7 +233,7 @@ server {
    # ECDHE better than DHE (faster)  ECDHE & DHE GCM better than CBC (attacks on AES)
    # Everything better than SHA1 (deprecated)
    #
-   ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA';
+   ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-CCM8:ECDHE-ECDSA-AES256-CCM:ECDHE-ECDSA-ARIA256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-CCM8:ECDHE-ECDSA-AES128-CCM:ECDHE-ECDSA-ARIA128-GCM-SHA256';
    ssl_prefer_server_ciphers on;
 
    ssl_certificate /var/lib/dehydrated/certs/${FQHN}/fullchain.pem;