Skip to content

Instantly share code, notes, and snippets.

@nbeguier

nbeguier/apache2.conf

Created September 5, 2018 18:07
Show Gist options
  • Save nbeguier/6c6f1568f6d6c237eb6ffa5631c5fb42 to your computer and use it in GitHub Desktop.
Save nbeguier/6c6f1568f6d6c237eb6ffa5631c5fb42 to your computer and use it in GitHub Desktop.
Download ZIP
Apache : BEAST & RC4
Raw
apache2.conf
# BEAST protection
## Remove TLSv1.0
SSLProtocol all -TLSv1 -SSLv3 -SSLv2
# BEAST protection, NO RC4 protection
## Allow TLSv1.0 and force RC4
SSLProtocol all -SSLv3 -SSLv2
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !SEED RC4"
# NO BEAST protection, RC4 protection
## Allow TLSv1.0 and remove RC4 from bulk ciphers
SSLProtocol all -SSLv3 -SSLv2
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !SEED!RC4"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment