Skip to content

Instantly share code, notes, and snippets.

@kariem

kariem/site.conf

Created January 10, 2018 11:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kariem/6235879633fdb59af5a1b6b3d55999f6 to your computer and use it in GitHub Desktop.
Save kariem/6235879633fdb59af5a1b6b3d55999f6 to your computer and use it in GitHub Desktop.
Download ZIP
Apache site configuration based on SSL Labs recommendations
Raw
site.conf
# Disable SSL 2 and SSL 3
SSLProtocol all -SSLv2 -SSLv3
# Ciphers in the correct order, newlines added for readability
SSLHonorCipherOrder on
SSLCipherSuite
EECDH+ECDSA+AESGCM
EECDH+aRSA+AESGCM
EECDH+ECDSA+SHA384
EECDH+ECDSA+SHA256
EECDH+aRSA+SHA384
EECDH+aRSA+SHA256
EECDH+aRSA+RC4
EECDH
EDH+aRSA
!RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS
# HSTS
Header add Strict-Transport-Security "max-age=15768000;includeSubDomains"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment