Only use secure SSL version.

Needed for PCI compliancy.

Only use secure SSL version.
Needed for PCI compliancy.
1d8cd90d · Romain Courteaud · 272414c4 · 1d8cd90d
Commit 1d8cd90d authored Jan 17, 2012 by Romain Courteaud
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

slapos/recipe/apache_zope_backend/template/apache.zope.conf.in ...s/recipe/apache_zope_backend/template/apache.zope.conf.in +2 -0

No files found.
--- a/slapos/recipe/apache_zope_backend/template/apache.zope.conf.in
+++ b/slapos/recipe/apache_zope_backend/template/apache.zope.conf.in
@@ -38,6 +38,8 @@ SSLCertificateFile %(certificate)s
 SSLCertificateKeyFile %(key)s
 SSLRandomSeed startup builtin
 SSLRandomSeed connect builtin
+SSLProtocol -ALL +SSLv3 +TLSv1
+SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
 SSLProxyEngine On