Skip to content

Instantly share code, notes, and snippets.

@akamsteeg
Created January 6, 2016 12:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save akamsteeg/1d9a87d8e3d6ece592c6 to your computer and use it in GitHub Desktop.
Save akamsteeg/1d9a87d8e3d6ece592c6 to your computer and use it in GitHub Desktop.
badssl.atlex.nl Apache configuration
<VirtualHost *:80 *:443>
# A config that scores abysmal in Ivan Ristic's SSL Server Test
# https://www.ssllabs.com/ssltest/analyze.html?d=badssl.atlex.nl
ServerName badssl.atlex.nl
DocumentRoot /home/akamsteeg/sites/badssl.atlex.nl/www
<Directory /home/akamsteeg/sites/badssl.atlex.nl/www>
Options FollowSymLinks
AllowOverride All
Order allow,deny
allow from all
</Directory>
ErrorLog /home/akamsteeg/sites/badssl.atlex.nl/logs/error.log
LogLevel warn
CustomLog /home/akamsteeg/sites/badssl.atlex.nl/logs/access.log combined
SSLEngine on
SSLCertificateFile /home/akamsteeg/sites/badssl.atlex.nl/ssl/badssl.atlex.nl.cer # Self-signed SHA1 with long validity
SSLCertificateKeyFile /home/akamsteeg/sites/badssl.atlex.nl/ssl/badssl.atlex.nl.key
SSLProtocol SSLv3 TLSv1 # Only works if this is the first vHost in Apache (do not try this on a server with multiple sites!)
SSLCipherSuite EXPORT:DES:RC4:3DES:MD5:!SK # Jup, the ancient ones
SSLHonorCipherOrder on
</VirtualHost>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment