ansible-roles/apache/files/evolinux-ssl.conf

12 lines
379 B
Plaintext

# Strong security.
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
SSLProtocol All -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCompression off
SSLSessionCache shmcb:/var/log/apache2/ssl_gcache_data(512000)
SSLSessionCacheTimeout 600
# Stapling not activated by default. Need config.
#SSLUseStapling on
#SSLStaplingCache shmcb:${APACHE_RUN_DIR}/stapling-cache(150000)