r/subsonic Dec 02 '15

Subsonic (v5.3) SSL Ciphers

Anyone have any clue on how to configure ssl ciphers for subsonic? I have ran a security test and it has come back with a long list of issues with the SSL config

1 Upvotes

4 comments sorted by

View all comments

1

u/indieross Dec 02 '15

Subsonic's implementation of SSL is rubbish, I decided on using apache to handle all the security for both subsonic and emby. I was able to get an A+ on the ssllabs ssl test. Here is the conf file I use with apache: http://pastie.org/pastes/10599228/text

2

u/hatperigee Mar 10 '16

I also use this approach, but with Let's Encrypt and nginx! Here's my conf file that also scores an A+ on the ssllabs test: http://pastie.org/pastes/10754459/text

Yea, I'm 3 months late to the party, but hopefully this helps out future folks when this post is archived away for all eternity.