From f2946b66c9478989436c2d2e1cccf8d32b895060 Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Fri, 14 Oct 2016 21:45:49 -0600 Subject: [PATCH] Update fusionpbx Added :!aNULL to nginx SSL config to exclude anon ciphers. --- debian/resources/nginx/fusionpbx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/resources/nginx/fusionpbx b/debian/resources/nginx/fusionpbx index 2da9ac7..725ad0b 100644 --- a/debian/resources/nginx/fusionpbx +++ b/debian/resources/nginx/fusionpbx @@ -118,7 +118,7 @@ server { ssl_certificate /etc/ssl/certs/nginx.crt; ssl_certificate_key /etc/ssl/private/nginx.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_ciphers HIGH:!ADH:!MD5; + ssl_ciphers HIGH:!ADH:!MD5:!aNULL; #REST api if ($uri ~* ^.*/api/.*$) {