# HG changeset patch # User Yaroslav Zhuravlev # Date 1433957516 -10800 # Node ID 47f70f50d5546459a0507f5ff64ae160f07a72f7 # Parent 0b89d1e54e8f674ccb0d01928d863a7268f6b4bd Removed recommendation about using RC4. diff --git a/xml/en/docs/http/configuring_https_servers.xml b/xml/en/docs/http/configuring_https_servers.xml --- a/xml/en/docs/http/configuring_https_servers.xml +++ b/xml/en/docs/http/configuring_https_servers.xml @@ -8,7 +8,7 @@
@@ -63,18 +63,6 @@ Note that default values of these direct changed several times. - -CBC-mode ciphers might be vulnerable to a number of attacks and to -the BEAST attack in particular (see -CVE-2011-3389). -Configuration of ciphers can be adjusted to prefer RC4-SHA as the following: - - - ssl_ciphers RC4:HIGH:!aNULL:!MD5; - ssl_prefer_server_ciphers on; - - - diff --git a/xml/ru/docs/http/configuring_https_servers.xml b/xml/ru/docs/http/configuring_https_servers.xml --- a/xml/ru/docs/http/configuring_https_servers.xml +++ b/xml/ru/docs/http/configuring_https_servers.xml @@ -8,7 +8,7 @@
@@ -63,18 +63,6 @@ server { менялись. - -Известно, что шифры с CBC-режимом уязвимы к ряду атак, в частности -к BEAST-атаке (см. -CVE-2011-3389). -Настройка шифров может быть изменена так, чтобы предпочитался RC4-SHA: - - - ssl_ciphers RC4:HIGH:!aNULL:!MD5; - ssl_prefer_server_ciphers on; - - -