# std/ssl_config

Theme:

- Manual
- Standard library
- Index
- Compiler docs
- Fusion docs
- devel, stable

Search:
Source Edit

This module contains SSL configuration parameters obtained from Mozilla OpSec.

The configuration file used to generate this module: https://ssl-config.mozilla.org/guidelines/5.4.json

# Consts

    CiphersIntermediate = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"

  An OpenSSL-compatible list of secure ciphers for `intermediate` compatibility per Mozilla's recommendations.

  Oldest clients supported by this list:

  - Firefox 27
  - Android 4.4.2
  - Chrome 31
  - Edge
  - IE 11 on Windows 7
  - Java 8u31
  - OpenSSL 1.0.1
  - Opera 20
  - Safari 9
  Source Edit

    CiphersModern = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"

  An OpenSSL-compatible list of secure ciphers for `modern` compatibility per Mozilla's recommendations.

  Oldest clients supported by this list:

  - Firefox 63
  - Android 10.0
  - Chrome 70
  - Edge 75
  - Java 11
  - OpenSSL 1.1.1
  - Opera 57
  - Safari 12.1
  Source Edit

    CiphersOld = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"

  An OpenSSL-compatible list of secure ciphers for `old` compatibility per Mozilla's recommendations.

  Oldest clients supported by this list:

  - Firefox 1
  - Android 2.3
  - Chrome 1
  - Edge 12
  - IE8 on Windows XP
  - Java 6
  - OpenSSL 0.9.8
  - Opera 5
  - Safari 1
  Source Edit