4 Commits

Author	SHA1	Message	Date
Joshua Tauberer	39bca053ed	add 2048 bits of DH params for nginx, postfix, dovecot ... nginx/postfix use a new pre-generated dh2048.pem file. dovecot generates the bits on its own. ssllabs.com reports that TLS_DHE ciphers went from 1024 to 2048 bits as expected. The ECDHE ciphers remain at 256 bits --- no idea what that really means. (This tests nginx only. I haven't tested postfix/dovecot.) see https://discourse.mailinabox.email/t/fips-ready-for-ssl-dhec-key-exchange/76/3	2014-09-26 22:09:22 +00:00
Joshua Tauberer	51dd2ed70b	update nginx SSL options, fixes #61	2014-06-03 14:06:02 +00:00
Joshua Tauberer	b646771517	redirect all HTTP to HTTPS and enable HSTS, closes #18	2014-05-14 12:15:11 +00:00
Joshua Tauberer	6fd768d6ee	update to @konklone's latest nginx SSL configuration recommendations	2014-04-17 20:27:52 -04:00