Merge pull request #52 from dev-sec/rndmh3ro-patch-1

update dhparams to 4096
dev-sec · Nov 28, 2021 · 4263d75 · 4263d75
2 parents caae721 + 9efcb59
commit 4263d75
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controls/nginx_spec.rb b/controls/nginx_spec.rb
@@ -235,7 +235,7 @@
     its('ssl_session_tickets') { should eq 'off' }
     its('ssl_ciphers') { should eq '\'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256\'' }
     its('ssl_prefer_server_ciphers') { should eq 'on' }
-    its('ssl_dhparam') { should eq '/etc/nginx/dh2048.pem' }
+    its('ssl_dhparam') { should eq '/etc/nginx/dh4096.pem' }
   end
 end