Skip to Content.
Sympa Menu

cacert-sysadm - Apache cipher suite configuration

cacert-sysadm AT lists.cacert.org

Subject: CAcert System Admins discussion list

List archive

Apache cipher suite configuration


Chronological Thread 
  • From: Michael Tänzer <michael.taenzer AT cacert.org>
  • To: Critical Admins <critical-admin AT cacert.org>, Sysadmins CAcert <cacert-sysadm AT lists.cacert.org>
  • Subject: Apache cipher suite configuration
  • Date: Mon, 10 Mar 2014 18:50:32 +0100
  • Openpgp: id=9940BEF1

Hi Guys,

if you haven't already done so you probably should add the following
configuration to /etc/apache2/mods-available/ssl.conf on the servers
administered by you:

# CAcert cipher suite configuration
SSLHonorCipherOrder on
SSLCipherSuite kEECDH:kEDH:AESGCM:ALL:+3DES!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL


--
Cheers,
Michael Tänzer

Attachment: signature.asc
Description: OpenPGP digital signature




Archive powered by MHonArc 2.6.18.

Top of Page