diff options
author | mh <mh@immerda.ch> | 2010-06-10 03:52:26 +0200 |
---|---|---|
committer | mh <mh@immerda.ch> | 2010-06-10 03:52:26 +0200 |
commit | b5c93a893a07f20f5322a95a64073f167d9dbb9a (patch) | |
tree | 1f2fbfe791658ad834ff4c62e21ca7f4db1dfa1b /files/vhosts.d | |
parent | 973e9107bb29bcd98868fabda464dc71e6d8af23 (diff) |
adjust sslciphersuite to new recommendations
Diffstat (limited to 'files/vhosts.d')
-rw-r--r-- | files/vhosts.d/Gentoo/0-default_ssl.conf | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/files/vhosts.d/Gentoo/0-default_ssl.conf b/files/vhosts.d/Gentoo/0-default_ssl.conf index 7efe879..a123de8 100644 --- a/files/vhosts.d/Gentoo/0-default_ssl.conf +++ b/files/vhosts.d/Gentoo/0-default_ssl.conf @@ -31,7 +31,8 @@ UseCanonicalName On # List the ciphers that the client is permitted to negotiate. # See the mod_ssl documentation for a complete list. #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL - SSLCipherSuite HIGH:MEDIUM:!ADH:-SSLv2 + #SSLCipherSuite HIGH:MEDIUM:!ADH:-SSLv2 + SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:@STRENGTH SSLCertificateFile /e/certs/server.crt SSLCertificateKeyFile /e/certs/server.key |