Lighttpd

Hello,

I'm trying to disable TLS 1.0 and 1.1 by forcing TLS 1.2 on lighttpd 1.4.19 with the following command lines (found on https://cipherli.st/) :

#### SSL engine
$SERVER["socket"] == ":443" {
                  ssl.engine                  = "enable" 
                  ssl.pemfile                 = "/etc/lighttpd/ssl/xx.pem" 
                  ssl.ca-file                 = "/etc/lighttpd/ssl/ca-bundle" 
                *#ssl.cipher-list = "EECDH+AESGCM:EDH+AESGCM:AES128+EECDH:AES128+EDH"*
                ssl.honor-cipher-order = "enable" 
                ssl.use-sslv2 = "disable" 
                ssl.use-sslv3 = "disable" 
                ssl.use-compression = "disable" 
                setenv.add-response-header = (
                        "Strict-Transport-Security" => "max-age=63072000; includeSubDomains; preload",
                        "X-Frame-Options" => "DENY",
                        "X-Content-Type-Options" => "nosniff" 
                )
}

But the ssl.cipher-list is in error when I try to reload :

(network.c.345) SSL: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match

If I hide it, it works perfectly.

Does the ssl.cipher-list parameters are wrong or my lighttpd version is too old ?

If you have any suggestion :)