--- file_not_specified_in_diff +++ file_not_specified_in_diff @@ -52,0 +52,19 @@ +# SSL Cipher Suite: +# List the ciphers that the client is permitted to negotiate. See the +# ciphers(1) man page from the openssl package for list of all available +# options. +@!@ +if configRegistry.get('apache2/ssl/ciphersuite'): + print 'SSLCipherSuite %s' % configRegistry.get('apache2/ssl/ciphersuite') +@!@ + +# SSLHonorCipherOrder +# Option to prefer the server's cipher preference order +# When choosing a cipher during an SSLv3 or TLSv1 handshake, normally the +# client's preference is used. If this directive is enabled, +# the server's preference will be used instead. +@!@ +if configRegistry.get('apache2/ssl/honorcipherorder'): + print 'SSLHonorCipherOrder %s' % configRegistry.get('apache2/ssl/honorcipherorder') + +@!@