X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fapache2%2Ffiles%2Fcommon-ssl.inc;h=cc281ee6a14a95ebd689ba8bc6878f532f08260b;hb=757a3f72fd630ed38e2f5da4c16825ba6d41cce3;hp=2021ab4c277c314565fd2c9d655310a98080b147;hpb=3eb533e5499e66423bafdedaf6c7d08ead1772de;p=mirror%2Fdsa-puppet.git diff --git a/modules/apache2/files/common-ssl.inc b/modules/apache2/files/common-ssl.inc index 2021ab4c2..cc281ee6a 100644 --- a/modules/apache2/files/common-ssl.inc +++ b/modules/apache2/files/common-ssl.inc @@ -8,23 +8,12 @@ # Enable/Disable SSL for this virtual host. SSLEngine on -# SSL Protocol support: -# List the protocol versions which clients are allowed to -# connect with. Disable SSLv2 by default (cf. RFC 6176). -SSLProtocol all -SSLv2 - # # Some MIME-types for downloading Certificates and CRLs # AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl .crl -# SSL Cipher Suite: -# List the ciphers that the client is permitted to negotiate. -# See the mod_ssl documentation for a complete list. -SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM -SSLHonorCipherOrder on - # Add STS Header add Strict-Transport-Security "max-age=604800"