foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

apache: Drop back to Mozilla intermediate

Browse source 
Looks like our proxies don't support modern settings yet.
This commit is contained in:
Timo Makinen 2020-08-28 10:13:29 +00:00
parent 47da9470a6
commit e7aa1c9b73
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
roles/apache/files/ssl.conf
View file

@ -7,8 +7,9 @@
Listen 443
# Use Mozilla recommended modern ciphers
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2
# Use Mozilla recommended intermediate settings
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
SSLHonorCipherOrder off
SSLSessionTickets off