[fix] set a proper SSLCipherSuite, removes SSLv3 (poodle protection)

2014-11-27 15:04:40 +01:00 · 2014-11-27 15:04:40 +01:00 · 07e790524d
parent 5bda690926
commit 07e790524d
1 changed files with 5 additions and 0 deletions
--- a/etc/alternc/apache2-ssl.conf
+++ b/etc/alternc/apache2-ssl.conf
@ -1,3 +1,8 @@
+
+SSLHonorCipherOrder on
+SSLCipherSuite ALL:!aNULL:!eNULL:!LOW:!EXP:!RC4:!3DES:+HIGH:+MEDIUM
+SSLProtocol all -SSLv2 -SSLv3
+
 <VirtualHost *:443>
  AssignUserId www-data www-data