v7.1.5 (#170)

bfren · web-flow · commit df1cf266bdc9 · 2025-11-07T12:06:56.000Z
Minor updates
* Updating SSL config templates
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-7.1.4
+7.1.5
diff --git a/overlay/etc/bf/templates/ssl-intermediate.conf.esh b/overlay/etc/bf/templates/ssl-intermediate.conf.esh
@@ -4,8 +4,9 @@
 #======================================================================================================================
 
 ssl_protocols                   TLSv1.2 TLSv1.3;
-ssl_ciphers                     ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+ssl_ciphers                     ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
 ssl_prefer_server_ciphers       off;
+ssl_ecdh_curve                  X25519:prime256v1:secp384r1;
 ssl_session_timeout             1d;
 ssl_session_cache               shared:MozSSL:10m;
 ssl_session_tickets             off;
diff --git a/overlay/etc/bf/templates/ssl-modern.conf.esh b/overlay/etc/bf/templates/ssl-modern.conf.esh
@@ -5,6 +5,7 @@
 
 ssl_protocols                   TLSv1.3;
 ssl_prefer_server_ciphers       off;
+ssl_ecdh_curve                  X25519:prime256v1:secp384r1;
 ssl_session_timeout             1d;
 ssl_session_cache               shared:MozSSL:10m;
 ssl_session_tickets             off;
