ssl_config

This module contains SSL configuration parameters obtained from Mozilla OpSec.

The configuration file used to generate this module: https://ssl-config.mozilla.org/guidelines/5.4.json

Consts

CiphersModern = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"

An OpenSSL-compatible list of secure ciphers for modern compatibility per Mozilla's recommendations.

Oldest clients supported by this list:

Firefox 63
Android 10.0
Chrome 70
Edge 75
Java 11
OpenSSL 1.1.1
Opera 57
Safari 12.1

CiphersIntermediate = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"

An OpenSSL-compatible list of secure ciphers for intermediate compatibility per Mozilla's recommendations.

Oldest clients supported by this list:

Firefox 27
Android 4.4.2
Chrome 31
Edge
IE 11 on Windows 7
Java 8u31
OpenSSL 1.0.1
Opera 20
Safari 9

Source Edit

CiphersOld = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"

An OpenSSL-compatible list of secure ciphers for old compatibility per Mozilla's recommendations.

Oldest clients supported by this list:

Firefox 1
Android 2.3
Chrome 1
Edge 12
IE8 on Windows XP
Java 6
OpenSSL 0.9.8
Opera 5
Safari 1

Source Edit