Last active
December 31, 2015 04:49
-
-
Save aristote/7936370 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#----------- 8<---Directives pour l'hôte virtuel ------------------------- | |
SSLEngine On | |
SSLCompression Off | |
SSLInsecureRenegotiation Off | |
SSLHonorCipherOrder On | |
SSLProtocol -ALL +TLSv1 +TLSv1.1 +TLSv1.2 | |
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4" | |
SSLCertificateFile /etc/apache2/ssl-keys/public.crt | |
SSLCertificateKeyFile /etc/apache2/ssl-keys/private.key | |
SSLCertificateChainFile /etc/apache2/ssl-keys/CertificateChain.pem | |
#---------------------- 8< ------------------------------------------------ | |
#J'ajoute ou modifie aussi les directives suivantes dans /etc/apache2/mods-available/ssl.con | |
SSLRandomSeed startup builtin | |
SSLRandomSeed startup file:/dev/urandom 512 | |
SSLRandomSeed connect builtin | |
SSLRandomSeed connect file:/dev/urandom 512 | |
#ainsi que les directives de "stapling" | |
SSLUseStapling On | |
SSLStaplingResponderTimeout 5 | |
SSLStaplingReturnResponderErrors Off | |
SSLStaplingCache shmcb:/var/run/ocsp(128000) | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment