Skip to content

Instantly share code, notes, and snippets.

@jaircuevajunior

jaircuevajunior/apache_ssl_secure.txt

Last active March 3, 2016 20:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jaircuevajunior/2d57cd2e1283bc0b3822 to your computer and use it in GitHub Desktop.
Save jaircuevajunior/2d57cd2e1283bc0b3822 to your computer and use it in GitHub Desktop.
Download ZIP
Secure SSL Enable Apache
Raw
apache_ssl_secure.txt
Editar o arquivo /etc/apache2/mods-available/ssl.conf
Comentar e adicionar as linhas: SSLCipherSuite e SSLProtocol
Editar o arquivo do vhost em questão
SSLEngine on
SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
SSLCompression off
SSLHonorCipherOrder On
SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA"
Header always set Strict-Transport-Security "max-age=63072000;"
SSLCertificateKeyFile /path/to/file.key
SSLCertificateFile /path/to/file.crt
SSLCertificateChainFile /path/to/file.ca-bundle
Test it: https://www.ssllabs.com/ssltest/analyze.html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment