Improved ciphers from apache::sslsite to prevent BEAST attacks.

This commit is contained in:
Timo Mkinen 2012-05-09 14:25:20 +03:00
parent 92b54f9a92
commit 5901b6d25c

View file

@ -22,8 +22,8 @@ SSLProtocol all -SSLv2
# SSL Cipher Suite: # SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate. # List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list. # See the mod_ssl documentation for a complete list.
SSLHonorCipherOrder On
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:!LOW SSLCipherSuite RC4-SHA:HIGH:!ADH
# Server Certificate: # Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate. If # Point SSLCertificateFile at a PEM encoded certificate. If