HCoop / hcoop / zz_old / debian / hcoop-apache2-config.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: dd905b9)
Better SSLCipherSuite for Perfect-Forward-Secrecy
authorClinton Ebadi <clinton@unknownlamer.org>
Fri, 2 May 2014 03:33:42 +0000 (23:33 -0400)
committerClinton Ebadi <clinton@unknownlamer.org>
Fri, 2 May 2014 03:33:42 +0000 (23:33 -0400)
files/conf.d/hcoop-ssl [new file with mode: 0644] patch | blob

diff --git a/files/conf.d/hcoop-ssl b/files/conf.d/hcoop-ssl
new file mode 100644 (file)
index 0000000..226dcd9
--- /dev/null
+++ b/files/conf.d/hcoop-ssl
@@ -0,0 +1,3 @@
+# Apache defaults are OK, just change CipherSuite for better PFS
+SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:HIGH:!MEDIUM:!LOW:!SSLv2:!aNULL:!PSK
+SSLHonorCipherOrder on
hcoop-apache2-config packaging