# this is a list that seems suitable as of 2014-10, when running wheezy. It
# probably requires re-visiting regularly.
- <% if @lsbmajdistrelease <= '7' -%>
+ <% if scope.call_function('versioncmp', [@lsbmajdistrelease, '7']) <= 0 -%>
SSLCipherSuite ECDH+AESGCM:ECDH+AES256:ECDH+AES128:ECDH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
<% else -%>
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
<% end -%>
- <%- if has_variable?("apache2deb9") && apache2deb9 == "true" -%>
+ <%- if has_variable?("apache2deb9") && @apache2deb9 -%>
SSLUseStapling On
# the default size is 32k, but we make it 1M.
</IfModule>
<IfModule mod_autoindex.c>
- IndexOptions +SuppressDescription
+ IndexOptions SuppressDescription
</IfModule>