Only use secure SSL version.

Needed for PCI compliancy.

Only use secure SSL version.
Needed for PCI compliancy.
9dc26834 · Romain Courteaud · 101b16a9 · 9dc26834
Commit 9dc26834 authored Jul 07, 2011 by Romain Courteaud
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

slapos/recipe/erp5/template/apache.ssl-snippet.conf.in slapos/recipe/erp5/template/apache.ssl-snippet.conf.in +2 -0

No files found.
--- a/slapos/recipe/erp5/template/apache.ssl-snippet.conf.in
+++ b/slapos/recipe/erp5/template/apache.ssl-snippet.conf.in
@@ -3,4 +3,6 @@ SSLCertificateFile %(login_certificate)s
 SSLCertificateKeyFile %(login_key)s
 SSLRandomSeed startup builtin
 SSLRandomSeed connect builtin
+SSLProtocol -ALL +SSLv3 +TLSv1
+SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM