summaryrefslogtreecommitdiff
path: root/files/vhosts.d
diff options
context:
space:
mode:
authormh <mh@immerda.ch>2010-06-10 03:52:26 +0200
committermh <mh@immerda.ch>2010-06-10 03:52:26 +0200
commitb5c93a893a07f20f5322a95a64073f167d9dbb9a (patch)
tree1f2fbfe791658ad834ff4c62e21ca7f4db1dfa1b /files/vhosts.d
parent973e9107bb29bcd98868fabda464dc71e6d8af23 (diff)
adjust sslciphersuite to new recommendations
Diffstat (limited to 'files/vhosts.d')
-rw-r--r--files/vhosts.d/Gentoo/0-default_ssl.conf3
1 files changed, 2 insertions, 1 deletions
diff --git a/files/vhosts.d/Gentoo/0-default_ssl.conf b/files/vhosts.d/Gentoo/0-default_ssl.conf
index 7efe879..a123de8 100644
--- a/files/vhosts.d/Gentoo/0-default_ssl.conf
+++ b/files/vhosts.d/Gentoo/0-default_ssl.conf
@@ -31,7 +31,8 @@ UseCanonicalName On
# List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list.
#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
- SSLCipherSuite HIGH:MEDIUM:!ADH:-SSLv2
+ #SSLCipherSuite HIGH:MEDIUM:!ADH:-SSLv2
+ SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:@STRENGTH
SSLCertificateFile /e/certs/server.crt
SSLCertificateKeyFile /e/certs/server.key