core/certmanager.lua
changeset 12124 0fcd80a55f15
parent 12109 47c9a76cce7d
child 12154 653a48b5a25b
--- a/core/certmanager.lua	Sat Dec 25 13:02:48 2021 +0100
+++ b/core/certmanager.lua	Sun Dec 26 00:05:16 2021 +0100
@@ -256,7 +256,7 @@
 
 local mozilla_ssl_configs = {
 	-- https://wiki.mozilla.org/Security/Server_Side_TLS
-	-- As of 2021-11-03
+	-- Version 5.6 as of 2021-12-26
 	modern = {
 		protocol = "tlsv1_3";
 		options = { cipher_server_preference = false };
@@ -313,6 +313,7 @@
 			"AES256-SHA";
 			"DES-CBC3-SHA";
 		};
+		curveslist = { "X25519"; "prime256v1"; "secp384r1" };
 		ciphersuites = { "TLS_AES_128_GCM_SHA256"; "TLS_AES_256_GCM_SHA384"; "TLS_CHACHA20_POLY1305_SHA256" };
 	};
 };