uwsgi_ssl_ciphers

The uwsgi_ssl_ciphers directive sets the list of ciphers for SSL connections to uWSGI servers.

Syntaxuwsgi_ssl_ciphers string;
Defaultnone
Contexthttp, server, location
Arguments1

Description

The 'uwsgi_ssl_ciphers' directive is utilized in NGINX configurations that manage secure connections to uWSGI applications through FastCGI or similar protocols. It specifies the cipher suite that the uWSGI server should use for SSL connections, ensuring that secure and encrypted communication occurs between NGINX and the uWSGI backend. This directive plays a crucial role in enforcing security policies and can help mitigate potential vulnerabilities by restricting the ciphers that can be used. Thus, careful selection of cipher suites is essential, as it impacts the security level of data transmitted over SSL connections.

The 'uwsgi_ssl_ciphers' directive accepts one argument, which is a string representing the list of ciphers. This list can be defined by utilizing the OpenSSL cipher string format. It is important to note that having a properly configured cipher list improves overall security and compliance with various security standards. Specifically, this directive can be placed in various contexts including http, server, or location blocks within the NGINX configuration, allowing flexibility in how SSL ciphers are specified and enforced across different sites or applications hosted by the server.

Config Example

uwsgi_ssl_ciphers 'HIGH:!aNULL:!MD5';

Ensure the OpenSSL library installed supports the specified ciphers.

Using deprecated or weak ciphers can expose your application to vulnerabilities.

Be cautious when applying this directive globally versus locally, as it can affect all SSL traffic if misconfigured.

← Back to all directives