From 85b1388b969adc218ffe06798e9e1f2b82c09653 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Wed, 22 Apr 2015 07:44:24 +0200 Subject: [PATCH] Adding !DSS to our CipherSuite does not make an effective difference, but it cuts down on noise in openssl ciphers -v --- modules/apache2/files/puppet-config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/apache2/files/puppet-config b/modules/apache2/files/puppet-config index 3502beb85..d754b1241 100644 --- a/modules/apache2/files/puppet-config +++ b/modules/apache2/files/puppet-config @@ -4,5 +4,5 @@ # this is a list that seems suitable as of 2014-10, when running wheezy. It # probably requires re-visiting regularly. - SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED + SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS -- 2.20.1