diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2013-10-11 16:02:38 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2013-10-11 16:02:38 -0300 |
| commit | a2ffe846a3693aa68d0c744137f616edd54dac3d (patch) | |
| tree | ef097719e838b1b17550ba5e2f9535ee4c4bd9ff | |
| parent | c28aff37223e5a9692dc48fc6751af201d77a3a3 (diff) | |
| download | puppet-apache-a2ffe846a3693aa68d0c744137f616edd54dac3d.tar.gz puppet-apache-a2ffe846a3693aa68d0c744137f616edd54dac3d.tar.bz2 | |
Updating SSLCipherSuite according to duraconf
| -rw-r--r-- | templates/site.erb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/site.erb b/templates/site.erb index f2443f9..a1a6a8a 100644 --- a/templates/site.erb +++ b/templates/site.erb @@ -63,7 +63,7 @@ # SSL Configuration SSLEngine on SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2 - SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH + SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH SSLHonorCipherOrder on SSLCompression off SSLCertificateFile /etc/ssl/certs/<%= title %>.crt |