SSLconf

#----------- 8<---Directives pour l'hôte virtuel -------------------------
        SSLEngine                       On
        SSLCompression                  Off
        SSLInsecureRenegotiation        Off
        SSLHonorCipherOrder             On
        SSLProtocol                     -ALL +TLSv1 +TLSv1.1 +TLSv1.2
        SSLCipherSuite                  "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
        SSLCertificateFile /etc/apache2/ssl-keys/public.crt
        SSLCertificateKeyFile /etc/apache2/ssl-keys/private.key
        SSLCertificateChainFile /etc/apache2/ssl-keys/CertificateChain.pem
#---------------------- 8< ------------------------------------------------
#J'ajoute ou modifie aussi les directives suivantes dans /etc/apache2/mods-available/ssl.con
        
        SSLRandomSeed startup builtin
        SSLRandomSeed startup file:/dev/urandom 512
        SSLRandomSeed connect builtin
        SSLRandomSeed connect file:/dev/urandom 512
        #ainsi que les directives de "stapling"
        SSLUseStapling                  On
        SSLStaplingResponderTimeout     5
        SSLStaplingReturnResponderErrors Off
        SSLStaplingCache                shmcb:/var/run/ocsp(128000)