From 07e790524d4290751e837e4282962e28f273bb34 Mon Sep 17 00:00:00 2001
From: Benjamin Sonntag <benjamin@octopuce.fr>
Date: Thu, 27 Nov 2014 15:04:40 +0100
Subject: [PATCH] [fix] set a proper SSLCipherSuite, removes SSLv3 (poodle
 protection)

---
 etc/alternc/apache2-ssl.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/etc/alternc/apache2-ssl.conf b/etc/alternc/apache2-ssl.conf
index 078a002d..f3144bb2 100644
--- a/etc/alternc/apache2-ssl.conf
+++ b/etc/alternc/apache2-ssl.conf
@@ -1,3 +1,8 @@
+
+SSLHonorCipherOrder on
+SSLCipherSuite ALL:!aNULL:!eNULL:!LOW:!EXP:!RC4:!3DES:+HIGH:+MEDIUM
+SSLProtocol all -SSLv2 -SSLv3
+
 <VirtualHost *:443>
   AssignUserId www-data www-data