Adding !DSS to our CipherSuite does not make an effective difference, but it cuts...
authorPeter Palfrader <peter@palfrader.org>
Wed, 22 Apr 2015 05:44:24 +0000 (07:44 +0200)
committerPeter Palfrader <peter@palfrader.org>
Wed, 22 Apr 2015 05:44:24 +0000 (07:44 +0200)
modules/apache2/files/puppet-config

index 3502beb..d754b12 100644 (file)
@@ -4,5 +4,5 @@
 
   # this is a list that seems suitable as of 2014-10, when running wheezy.  It
   # probably requires re-visiting regularly.
-  SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED
+  SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
 </IfModule>