From: Peter Palfrader Date: Fri, 31 May 2013 16:41:51 +0000 (+0200) Subject: Get rid of messing with the cipersuites X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=118989f8cc2a4746719f1a57e33580867dcfd841;p=mirror%2Fdsa-puppet.git Get rid of messing with the cipersuites --- diff --git a/modules/apache2/files/common-ssl.inc b/modules/apache2/files/common-ssl.inc index 2021ab4c2..f6f34eff9 100644 --- a/modules/apache2/files/common-ssl.inc +++ b/modules/apache2/files/common-ssl.inc @@ -19,12 +19,6 @@ SSLProtocol all -SSLv2 AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl .crl -# SSL Cipher Suite: -# List the ciphers that the client is permitted to negotiate. -# See the mod_ssl documentation for a complete list. -SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM -SSLHonorCipherOrder on - # Add STS Header add Strict-Transport-Security "max-age=604800"