# Apache defaults are OK, just change CipherSuite for better PFS
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:HIGH:!MEDIUM:!LOW:!SSLv2:!aNULL:!PSK
SSLHonorCipherOrder on