Only use secure SSL version.

Needed for PCI compliancy.

Only use secure SSL version.
Needed for PCI compliancy.
9ee5a8cd · Romain Courteaud · c55d003d · 9ee5a8cd
Commit 9ee5a8cd authored Jul 07, 2011 by Romain Courteaud
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

slapos/recipe/erp5/template/apache.ssl-snippet.conf.in slapos/recipe/erp5/template/apache.ssl-snippet.conf.in +2 -0

No files found.
--- a/slapos/recipe/erp5/template/apache.ssl-snippet.conf.in
+++ b/slapos/recipe/erp5/template/apache.ssl-snippet.conf.in
@@ -3,5 +3,7 @@ SSLCertificateFile %(login_certificate)s
 SSLCertificateKeyFile %(login_key)s
 SSLRandomSeed startup builtin
 SSLRandomSeed connect builtin
+SSLProtocol -ALL +SSLv3 +TLSv1
+SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

 SSLProxyEngine On