X-Git-Url: https://git.hcoop.net/hcoop/zz_old/debian/hcoop-apache2-config.git/blobdiff_plain/dd905b90768b26b5a5a46225682928bed3a6fcce..a5861df4347b9d4746d6ee0f8635fa11a8f20312:/files/conf.d/hcoop-ssl

diff --git a/files/conf.d/hcoop-ssl b/files/conf.d/hcoop-ssl
new file mode 100644
index 0000000..226dcd9
--- /dev/null
+++ b/files/conf.d/hcoop-ssl
@@ -0,0 +1,3 @@
+# Apache defaults are OK, just change CipherSuite for better PFS
+SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:HIGH:!MEDIUM:!LOW:!SSLv2:!aNULL:!PSK
+SSLHonorCipherOrder on