#   SSL Cipher Suite:

#   List the ciphers that the client is permitted to negotiate. See the

#   ciphers(1) man page from the openssl package for list of all available

#   options.

#   The value "SSLCipherSuite" has been set via UCR variable "apache2/ssl/ciphersuite"

@!@

if configRegistry.get('apache2/ssl/ciphersuite'):

	print 'SSLCipherSuite %s' % configRegistry.get('apache2/ssl/ciphersuite')

@!@

#   SSLHonorCipherOrder

#   Option to prefer the server's cipher preference order

#   When choosing a cipher during an SSLv3 or TLSv1 handshake, normally the 

#   client's preference is used. If this directive is enabled, 

#   the server's preference will be used instead.

#   Default: SSLHonorCipherOrder off

#   The value "SSLHonorCipherOrder" has been set via UCR variable "apache2/ssl/honorcipherorder"

@!@

if configRegistry.get('apache2/ssl/honorcipherorder'):

	print 'SSLHonorCipherOrder %s' % configRegistry.get('apache2/ssl/honorcipherorder')

@!@

#   SSLCompression

#   This directive allows to enable compression on the SSL level.

#   Default: SSLCompression off

#   Warning: Enabling compression causes security issues in most setups (the so called CRIME attack).

#   The value "SSLCompression" has been set via UCR variable "apache2/ssl/compression"

@!@

if configRegistry.get('apache2/ssl/compression'):

	print 'SSLCompression %s' % configRegistry.get('apache2/ssl/compression')

@!@