Get rid of SHA-1 – nginx, TLSv1.2, PFS and SHA-2

Tue, 09 Sep 2014 18:02:32 +0000

Everyone who knows me a little bit knows how much I dislike Google but this time we really should thank them for taking a real step toward a more secure web.
They are finally moving away from SHA-1 to the much more secure SHA-2, more info can be found here: http://googleonlinesecurity.blogspot.it/2014/09/gradually-sunsetting-sha-1.html

.:. Setup

CentOS 6.5 x86_64
nginx/1.6.1
OpenSSL 1.0.1e-fips 11 Feb 2013

Nginx developers provide an up to date repository (http://wiki.nginx.org/Install)for CentOS:

Perfect Forward Secrecy on nagg.eu

Get rid of SHA-1 – nginx, TLSv1.2, PFS and SHA-2

.:. Setup